type=DAEMON_START msg=audit(1718702253.723:7917): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=684 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1718702253.731:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702253.780:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1718702253.926:7): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1718702253.926:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc765f8350 a2=3c a3=0 items=0 ppid=689 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702253.926:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1718702253.926:8): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1718702253.926:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc765f8350 a2=3c a3=0 items=0 ppid=689 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702253.926:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1718702253.926:9): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1718702253.926:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc765f8350 a2=3c a3=0 items=0 ppid=689 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702253.926:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1718702253.928:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1718702253.934:11): pid=706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702253.939:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702253.955:13): prog-id=18 op=LOAD
type=SERVICE_START msg=audit(1718702253.966:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702253.973:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702254.014:16): prog-id=19 op=LOAD
type=BPF msg=audit(1718702254.014:17): prog-id=20 op=LOAD
type=BPF msg=audit(1718702254.014:18): prog-id=21 op=LOAD
type=SERVICE_START msg=audit(1718702254.018:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702254.160:20): prog-id=22 op=LOAD
type=SERVICE_START msg=audit(1718702254.587:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702254.764:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702254.929:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702254.957:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702260.693:25): prog-id=23 op=LOAD
type=BPF msg=audit(1718702260.693:26): prog-id=24 op=LOAD
type=SERVICE_START msg=audit(1718702260.743:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702260.833:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702260.947:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702261.236:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702261.257:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702261.361:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1718702263.723:33): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_USER msg=audit(1718702263.727:34): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702263.727:35): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702263.727:36): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702263.727:37): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702263.727:38): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="rocky" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1718702264.001:39): pid=888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=ACCT_LOCK msg=audit(1718702264.063:40): pid=895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=SERVICE_START msg=audit(1718702265.072:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.105:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.111:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.114:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.117:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.121:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.127:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_RUNLEVEL msg=audit(1718702265.145:48): pid=914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.147:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702265.147:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702265.593:51): pid=902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1718702265.598:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.624:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702265.705:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702266.386:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702266.586:56): pid=1666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1718702266.595:57): pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1718702266.596:58): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=1670 suid=74 rport=53512 laddr=10.0.0.28 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1718702266.596:59): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=1670 suid=74 rport=53512 laddr=10.0.0.28 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1718702266.715:60): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702266.715:61): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:92:3f:76:ae:b3:c4:29:f5:3c:2c:a0:b6:51:ea:7a:b4:2a:ad:64:ca:1e:07:10:fa:50:6f:d7:e1:04:76:6a:e7 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1718702266.842:62): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702266.842:63): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1670 suid=74 rport=53512 laddr=10.0.0.28 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1718702266.849:64): pid=1667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1718702266.849:65): pid=1667 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1718702266.849:65): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc73d69b50 a2=4 a3=3e8 items=0 ppid=1140 pid=1667 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702266.849:65): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1718702266.855:66): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1718702266.927:67): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1718702267.017:68): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1718702267.017:69): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1718702267.017:70): pid=1772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1718702267.017:71): pid=1772 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1718702267.017:71): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe1b1df310 a2=4 a3=3e8 items=0 ppid=1 pid=1772 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702267.017:71): proctitle="(systemd)"
type=USER_START msg=audit(1718702267.018:72): pid=1772 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1718702267.115:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1718702267.124:74): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702267.125:75): pid=1887 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1718702267.126:76): pid=1887 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1718702267.175:77): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702267.175:78): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702267.176:79): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1718702267.217:80): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702267.217:81): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1718702267.218:82): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702267.218:83): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702267.221:84): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1950 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1718702267.235:85): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702267.235:86): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1718702267.238:87): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702267.238:88): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702267.240:89): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1718702267.355:90): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1718702267.355:91): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D792062696E642062696E642D7574696C7320686170726F7879206874747064206E65742D746F6F6C73 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1718702267.356:92): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1718702267.357:93): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1718702271.412:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702281.023:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1718702282.816:96): pid=4051 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=48 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="apache"
type=GRP_MGMT msg=audit(1718702282.843:97): pid=4051 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=48 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="apache"
type=ADD_USER msg=audit(1718702282.910:98): pid=4058 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="apache" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=ADD_GROUP msg=audit(1718702283.671:99): pid=4069 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=25 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="named"
type=GRP_MGMT msg=audit(1718702283.675:100): pid=4069 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=25 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="named"
type=ADD_USER msg=audit(1718702283.726:101): pid=4075 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="named" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_STOP msg=audit(1718702291.043:102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702291.063:103): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702291.063:104): prog-id=0 op=UNLOAD
type=MAC_POLICY_LOAD msg=audit(1718702292.634:105): auid=1000 ses=1 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1718702292.634:105): arch=c000003e syscall=1 success=yes exit=3511466 a0=4 a1=7fe6e3800000 a2=3594aa a3=0 items=0 ppid=4094 pid=4104 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1718702292.634:105): proctitle="/sbin/load_policy"
type=ADD_GROUP msg=audit(1718702292.821:106): pid=4110 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="haproxy"
type=GRP_MGMT msg=audit(1718702292.834:107): pid=4110 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="haproxy"
type=ADD_USER msg=audit(1718702292.902:108): pid=4117 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="haproxy" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1718702293.321:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rdb8624aa4e674c03a6cc838f29418677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702293.572:110): prog-id=25 op=LOAD
type=BPF msg=audit(1718702293.572:111): prog-id=26 op=LOAD
type=BPF msg=audit(1718702293.572:112): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.572:113): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.573:114): prog-id=27 op=LOAD
type=BPF msg=audit(1718702293.573:115): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.575:116): prog-id=28 op=LOAD
type=BPF msg=audit(1718702293.575:117): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.578:118): prog-id=29 op=LOAD
type=BPF msg=audit(1718702293.578:119): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.578:120): prog-id=30 op=LOAD
type=BPF msg=audit(1718702293.578:121): prog-id=31 op=LOAD
type=BPF msg=audit(1718702293.578:122): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.578:123): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.580:124): prog-id=32 op=LOAD
type=BPF msg=audit(1718702293.580:125): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.580:126): prog-id=33 op=LOAD
type=BPF msg=audit(1718702293.580:127): prog-id=34 op=LOAD
type=BPF msg=audit(1718702293.580:128): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702293.580:129): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1718702293.605:130): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-1.7.0-12.el9_3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.605:131): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-util-bdb-1.6.1-23.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.605:132): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-util-1.6.1-23.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:133): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="apr-util-openssl-1.6.1-23.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:134): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-license-32:9.16.23-18.el9_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:135): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:136): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fstrm-0.6.1-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:137): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:138): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-libs-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:139): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-utils-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:140): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-dnssec-doc-32:9.16.23-18.el9_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.606:141): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-tools-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:142): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-filesystem-2.4.57-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:143): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rocky-logos-httpd-90.15-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:144): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ply-3.11-14.el9.0.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:145): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-bind-32:9.16.23-18.el9_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:146): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-dnssec-utils-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:147): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mailcap-2.1.49-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:148): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-core-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:149): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mod_lua-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:150): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="httpd-2.4.57-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:151): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mod_http2-2.0.26-2.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:152): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-32:9.16.23-18.el9_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:153): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="haproxy-2.4.22-3.el9_3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1718702293.607:154): pid=2054 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-tools-2.0-0.62.20160912git.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1718702296.654:155): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1718702296.654:156): pid=1983 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1718702296.657:157): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702296.657:158): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1718702296.658:159): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702296.658:160): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702296.661:161): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=5765 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1718702296.675:162): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702296.675:163): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1718702296.676:164): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1718702296.676:165): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702296.678:166): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=5803 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1718702296.693:167): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1718702296.693:168): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1718702297.328:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rdb8624aa4e674c03a6cc838f29418677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.338:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.338:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.339:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1718702297.350:173): pid=1140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1718702297.353:174): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1718702297.353:175): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1718702297.353:176): pid=1667 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:81:7e:64:29:ab:8e:e2:5c:d2:c0:04:94:33:3c:6d:7d:8c:36:a3:31:d6:b7:f4:63:49:4e:be:02:8a:f8:14:96 direction=? spid=1667 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1718702297.357:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.368:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.370:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.372:180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.374:181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.375:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702297.376:183): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1718702297.380:184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.382:185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.387:186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.389:187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702297.580:188): prog-id=35 op=LOAD
type=BPF msg=audit(1718702297.580:189): prog-id=36 op=LOAD
type=BPF msg=audit(1718702297.580:190): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.580:191): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.581:192): prog-id=37 op=LOAD
type=BPF msg=audit(1718702297.581:193): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.583:194): prog-id=38 op=LOAD
type=BPF msg=audit(1718702297.583:195): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.583:196): prog-id=39 op=LOAD
type=BPF msg=audit(1718702297.583:197): prog-id=40 op=LOAD
type=BPF msg=audit(1718702297.583:198): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.583:199): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.584:200): prog-id=41 op=LOAD
type=BPF msg=audit(1718702297.584:201): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.584:202): prog-id=42 op=LOAD
type=BPF msg=audit(1718702297.584:203): prog-id=43 op=LOAD
type=BPF msg=audit(1718702297.584:204): prog-id=0 op=UNLOAD
type=BPF msg=audit(1718702297.584:205): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1718702297.595:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.597:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1718702297.599:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.618:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.619:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.621:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702297.622:212): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1718702297.631:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.652:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.655:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.666:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.670:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1718702297.675:218): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1718702297.684:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nis-domainname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.685:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.686:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.687:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.688:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.689:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.690:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.691:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_SHUTDOWN msg=audit(1718702297.699:227): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1718702297.703:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=DAEMON_END msg=audit(1718702297.706:7918): op=terminate auid=0 pid=1 subj=system_u:system_r:init_t:s0 res=successAUID="root"
type=DAEMON_START msg=audit(1748529247.848:3834): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=704 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1748529247.864:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1748529247.891:6): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1748529247.891:6): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffed9b7c9f0 a2=3c a3=0 items=0 ppid=709 pid=719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529247.891:6): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1748529247.891:7): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1748529247.891:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffed9b7c9f0 a2=3c a3=0 items=0 ppid=709 pid=719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529247.891:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1748529247.891:8): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1748529247.891:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffed9b7c9f0 a2=3c a3=0 items=0 ppid=709 pid=719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529247.891:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1748529247.894:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1748529247.900:10): pid=726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529247.905:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529247.917:12): prog-id=18 op=LOAD
type=SERVICE_START msg=audit(1748529247.931:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529247.937:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rngd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529247.949:15): prog-id=19 op=LOAD
type=BPF msg=audit(1748529247.949:16): prog-id=20 op=LOAD
type=BPF msg=audit(1748529247.949:17): prog-id=21 op=LOAD
type=SERVICE_START msg=audit(1748529247.960:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529247.961:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529247.964:20): prog-id=22 op=LOAD
type=SERVICE_START msg=audit(1748529247.979:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529247.992:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra73b3f55203d4356943e75567f6c8a07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529248.211:23): prog-id=23 op=LOAD
type=BPF msg=audit(1748529248.211:24): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529248.216:25): prog-id=24 op=LOAD
type=BPF msg=audit(1748529248.216:26): prog-id=25 op=LOAD
type=BPF msg=audit(1748529248.216:27): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529248.216:28): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529248.216:29): prog-id=26 op=LOAD
type=BPF msg=audit(1748529248.216:30): prog-id=27 op=LOAD
type=BPF msg=audit(1748529248.216:31): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529248.216:32): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529248.217:33): prog-id=28 op=LOAD
type=BPF msg=audit(1748529248.217:34): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529248.217:35): prog-id=29 op=LOAD
type=BPF msg=audit(1748529248.217:36): prog-id=30 op=LOAD
type=BPF msg=audit(1748529248.217:37): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529248.217:38): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529248.218:39): prog-id=31 op=LOAD
type=BPF msg=audit(1748529248.218:40): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529248.218:41): prog-id=32 op=LOAD
type=BPF msg=audit(1748529248.218:42): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1748529248.233:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=logrotate comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529248.233:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=logrotate comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529248.235:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-restart-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529248.235:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-restart-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529248.237:47): prog-id=33 op=LOAD
type=BPF msg=audit(1748529248.237:48): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1748529248.286:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529248.293:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529249.478:51): prog-id=34 op=LOAD
type=BPF msg=audit(1748529249.478:52): prog-id=35 op=LOAD
type=SERVICE_START msg=audit(1748529249.528:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529249.609:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529249.675:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529249.712:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529249.745:57): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529249.801:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ACCT_LOCK msg=audit(1748529250.929:59): pid=3719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="rocky"
type=SERVICE_START msg=audit(1748529251.597:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529251.620:61): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529251.625:62): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529251.628:63): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529251.632:64): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529251.636:65): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529251.646:66): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_RUNLEVEL msg=audit(1748529251.656:67): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529251.659:68): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529251.659:69): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529252.111:70): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529252.691:71): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529253.381:72): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529255.452:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529255.452:74): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529255.463:75): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra73b3f55203d4356943e75567f6c8a07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529257.046:76): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529257.047:77): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11675 suid=74 rport=59832 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529257.047:78): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11675 suid=74 rport=59832 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529257.135:79): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529257.135:80): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529257.176:81): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529257.176:82): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11675 suid=74 rport=59832 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529257.178:83): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529257.178:84): pid=11674 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529257.178:84): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc41a34410 a2=4 a3=3e8 items=0 ppid=4939 pid=11674 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529257.178:84): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529257.181:85): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748529257.204:86): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529257.241:87): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1748529257.241:88): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1748529257.241:89): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529257.241:90): pid=11678 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529257.241:90): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc018d9bf0 a2=4 a3=3e8 items=0 ppid=1 pid=11678 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529257.241:90): proctitle="(systemd)"
type=USER_START msg=audit(1748529257.242:91): pid=11678 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748529257.329:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748529257.336:93): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.337:94): pid=11687 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11687 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529257.338:95): pid=11687 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529257.386:96): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529257.386:97): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.388:98): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11688 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529257.419:99): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529257.419:100): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.419:101): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11687 suid=1000 rport=59832 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.420:102): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11687 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529257.421:103): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529257.421:104): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.422:105): pid=11674 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529257.449:106): pid=11702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529257.450:107): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11702 suid=74 rport=59836 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529257.450:108): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11702 suid=74 rport=59836 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529257.520:109): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529257.520:110): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529257.554:111): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529257.554:112): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11702 suid=74 rport=59836 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529257.555:113): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529257.555:114): pid=11701 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529257.555:114): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe22c929f0 a2=4 a3=3e8 items=0 ppid=4939 pid=11701 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529257.555:114): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529257.557:115): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529257.566:116): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.567:117): pid=11704 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529257.567:118): pid=11704 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529257.617:119): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529257.617:120): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.618:121): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11705 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.666:122): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11704 suid=1000 rport=59836 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.666:123): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11704 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529257.668:124): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529257.668:125): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529257.668:126): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529257.668:127): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.668:128): pid=11701 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529257.687:129): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529257.688:130): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11720 suid=74 rport=59838 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529257.688:131): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11720 suid=74 rport=59838 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529257.758:132): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529257.758:133): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529257.792:134): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529257.792:135): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11720 suid=74 rport=59838 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529257.793:136): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529257.794:137): pid=11719 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529257.794:137): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc5cef1560 a2=4 a3=3e8 items=0 ppid=4939 pid=11719 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529257.794:137): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529257.794:138): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529257.802:139): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.804:140): pid=11722 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529257.805:141): pid=11722 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529257.851:142): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529257.851:143): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.852:144): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11723 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.895:145): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11722 suid=1000 rport=59838 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.895:146): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11722 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529257.897:147): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529257.897:148): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529257.897:149): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529257.897:150): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529257.897:151): pid=11719 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529257.914:152): pid=11738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529257.915:153): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11738 suid=74 rport=59840 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529257.915:154): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11738 suid=74 rport=59840 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529257.986:155): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529257.986:156): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529258.020:157): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529258.021:158): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11738 suid=74 rport=59840 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529258.022:159): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529258.022:160): pid=11737 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529258.022:160): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffefc61a20 a2=4 a3=3e8 items=0 ppid=4939 pid=11737 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529258.022:160): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529258.022:161): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529258.031:162): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.032:163): pid=11740 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529258.033:164): pid=11740 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529258.080:165): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529258.080:166): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.081:167): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11741 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529258.158:168): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529258.158:169): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F7069702E636F6E66202F6574632F7069702E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529258.158:170): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529258.161:171): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529258.166:172): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529258.168:173): pid=11756 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748529258.204:174): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529258.204:175): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6B646972202D70202F6574632F646F636B65722F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529258.205:176): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529258.207:177): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529258.210:178): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529258.211:179): pid=11759 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748529258.246:180): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529258.246:181): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370202D66202E2F646F636B65722D6461656D6F6E2E6A736F6E202F6574632F646F636B65722F6461656D6F6E2E6A736F6E exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529258.247:182): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529258.248:183): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529258.252:184): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529258.252:185): pid=11762 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.254:186): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11740 suid=1000 rport=59840 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.254:187): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11740 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529258.255:188): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529258.255:189): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529258.256:190): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529258.256:191): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.256:192): pid=11737 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529258.273:193): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529258.274:194): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11766 suid=74 rport=59842 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529258.274:195): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11766 suid=74 rport=59842 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529258.348:196): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529258.348:197): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529258.385:198): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529258.385:199): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11766 suid=74 rport=59842 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529258.386:200): pid=11765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529258.386:201): pid=11765 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529258.386:201): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc640e2730 a2=4 a3=3e8 items=0 ppid=4939 pid=11765 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529258.386:201): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529258.387:202): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529258.397:203): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.398:204): pid=11768 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529258.399:205): pid=11768 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529258.444:206): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529258.445:207): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.446:208): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11769 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529258.463:209): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529258.463:210): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.463:211): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11768 suid=1000 rport=59842 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.464:212): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11768 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529258.464:213): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529258.464:214): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.465:215): pid=11765 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529258.484:216): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529258.484:217): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11783 suid=74 rport=59844 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529258.485:218): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11783 suid=74 rport=59844 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529258.562:219): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529258.562:220): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529258.595:221): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529258.595:222): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11783 suid=74 rport=59844 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529258.598:223): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529258.598:224): pid=11782 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529258.598:224): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe34d38420 a2=4 a3=3e8 items=0 ppid=4939 pid=11782 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529258.598:224): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529258.599:225): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529258.607:226): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.608:227): pid=11785 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529258.610:228): pid=11785 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529258.657:229): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529258.657:230): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.658:231): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529258.711:232): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529258.711:233): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=657468746F6F6C202D4B2065746830207478206F6666 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529258.711:234): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529258.712:235): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529258.716:236): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529258.716:237): pid=11803 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.718:238): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11785 suid=1000 rport=59844 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.718:239): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529258.719:240): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529258.720:241): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529258.720:242): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529258.720:243): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.720:244): pid=11782 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11782 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529258.741:245): pid=11807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529258.742:246): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11807 suid=74 rport=59846 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529258.742:247): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11807 suid=74 rport=59846 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529258.813:248): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529258.813:249): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529258.847:250): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529258.848:251): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11807 suid=74 rport=59846 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529258.849:252): pid=11806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529258.849:253): pid=11806 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529258.849:253): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff8ca49f00 a2=4 a3=3e8 items=0 ppid=4939 pid=11806 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529258.849:253): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529258.850:254): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529258.859:255): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.860:256): pid=11809 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529258.861:257): pid=11809 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529258.907:258): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529258.907:259): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.909:260): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.953:261): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11809 suid=1000 rport=59846 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.953:262): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11809 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529258.954:263): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529258.954:264): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529258.955:265): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529258.955:266): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529258.955:267): pid=11806 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529258.972:268): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529258.972:269): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11825 suid=74 rport=59848 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529258.972:270): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11825 suid=74 rport=59848 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529259.045:271): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529259.045:272): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529259.079:273): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529259.079:274): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11825 suid=74 rport=59848 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529259.080:275): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529259.081:276): pid=11824 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529259.081:276): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcaf36fd40 a2=4 a3=3e8 items=0 ppid=4939 pid=11824 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529259.081:276): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529259.081:277): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529259.089:278): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.091:279): pid=11827 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529259.093:280): pid=11827 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529259.138:281): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529259.138:282): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.139:283): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529259.192:284): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529259.192:285): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D66202F6574632F79756D2E7265706F732E642F726F636B792D6164646F6E732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D646576656C2E7265706F202F6574632F79756D2E7265706F732E642F726F636B792D6578747261732E7265706F202F6574632F79756D2E7265706F732E642F726F636B792E7265706F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529259.193:286): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529259.196:287): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529259.198:288): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529259.198:289): pid=11841 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748529259.235:290): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529259.235:291): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D626173652D726F636B79392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529259.235:292): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529259.236:293): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529259.240:294): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529259.240:295): pid=11828 uid=1000 auid=1000 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529259.242:296): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529259.242:297): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.242:298): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11827 suid=1000 rport=59848 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.242:299): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529259.243:300): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529259.244:301): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.244:302): pid=11824 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529259.267:303): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529259.267:304): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11847 suid=74 rport=59850 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529259.267:305): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11847 suid=74 rport=59850 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529259.339:306): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529259.340:307): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529259.373:308): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529259.373:309): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11847 suid=74 rport=59850 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529259.374:310): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529259.374:311): pid=11846 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529259.374:311): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc96d04ae0 a2=4 a3=3e8 items=0 ppid=4939 pid=11846 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529259.374:311): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529259.374:312): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529259.384:313): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.385:314): pid=11849 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529259.386:315): pid=11849 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529259.432:316): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529259.432:317): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.433:318): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11850 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.476:319): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11849 suid=1000 rport=59850 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.476:320): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529259.477:321): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529259.477:322): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529259.478:323): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529259.478:324): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.478:325): pid=11846 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529259.493:326): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529259.495:327): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11865 suid=74 rport=59852 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529259.495:328): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11865 suid=74 rport=59852 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529259.568:329): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529259.568:330): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529259.602:331): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529259.602:332): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11865 suid=74 rport=59852 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529259.604:333): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529259.604:334): pid=11864 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529259.604:334): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd1f0ad0c0 a2=4 a3=3e8 items=0 ppid=4939 pid=11864 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529259.604:334): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529259.605:335): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529259.615:336): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.616:337): pid=11867 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529259.617:338): pid=11867 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529259.661:339): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529259.661:340): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.662:341): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529259.714:342): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529259.714:343): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6370206D6972726F722D6570656C392E7265706F202F6574632F79756D2E7265706F732E642F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529259.714:344): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529259.717:345): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529259.721:346): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529259.721:347): pid=11868 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529259.723:348): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529259.723:349): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.723:350): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11867 suid=1000 rport=59852 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.723:351): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11867 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529259.724:352): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529259.725:353): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.725:354): pid=11864 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529259.740:355): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529259.742:356): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11884 suid=74 rport=59854 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529259.742:357): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11884 suid=74 rport=59854 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529259.813:358): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529259.813:359): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529259.847:360): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529259.847:361): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11884 suid=74 rport=59854 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529259.849:362): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529259.849:363): pid=11883 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529259.849:363): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe1c52e3b0 a2=4 a3=3e8 items=0 ppid=4939 pid=11883 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529259.849:363): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529259.849:364): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529259.857:365): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.859:366): pid=11886 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529259.859:367): pid=11886 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_STOP msg=audit(1748529259.869:368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1748529259.905:369): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529259.905:370): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.906:371): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11887 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529259.958:372): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529259.958:373): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D6F6470726F62652069705F7461626C6573 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529259.958:374): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529259.960:375): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529259.973:376): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529259.973:377): pid=11887 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.976:378): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11886 suid=1000 rport=59854 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.976:379): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529259.977:380): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529259.977:381): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529259.978:382): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529259.978:383): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529259.978:384): pid=11883 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529259.994:385): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529259.995:386): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11904 suid=74 rport=59856 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529259.995:387): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11904 suid=74 rport=59856 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529260.063:388): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529260.063:389): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529260.098:390): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529260.098:391): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11904 suid=74 rport=59856 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529260.100:392): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529260.100:393): pid=11902 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529260.100:393): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff3b078dd0 a2=4 a3=3e8 items=0 ppid=4939 pid=11902 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529260.100:393): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529260.101:394): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529260.110:395): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529260.111:396): pid=11906 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529260.111:397): pid=11906 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529260.160:398): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529260.160:399): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529260.161:400): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529260.213:401): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529260.213:402): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D79206F70656E7373682D736572766572206F70656E73736C exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529260.213:403): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529260.214:404): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1748529277.464:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra343f7de7b72400d95c71c53258e9bba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529277.631:406): prog-id=36 op=LOAD
type=BPF msg=audit(1748529277.631:407): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.633:408): prog-id=37 op=LOAD
type=BPF msg=audit(1748529277.633:409): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.633:410): prog-id=38 op=LOAD
type=BPF msg=audit(1748529277.633:411): prog-id=39 op=LOAD
type=BPF msg=audit(1748529277.633:412): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.633:413): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.634:414): prog-id=40 op=LOAD
type=BPF msg=audit(1748529277.634:415): prog-id=41 op=LOAD
type=BPF msg=audit(1748529277.634:416): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.634:417): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.635:418): prog-id=42 op=LOAD
type=BPF msg=audit(1748529277.635:419): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.635:420): prog-id=43 op=LOAD
type=BPF msg=audit(1748529277.635:421): prog-id=44 op=LOAD
type=BPF msg=audit(1748529277.635:422): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.635:423): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.637:424): prog-id=45 op=LOAD
type=BPF msg=audit(1748529277.637:425): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.637:426): prog-id=46 op=LOAD
type=BPF msg=audit(1748529277.637:427): prog-id=47 op=LOAD
type=BPF msg=audit(1748529277.637:428): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529277.637:429): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1748529277.650:430): pid=4939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=4939 suid=0  exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1748529277.652:431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529277.666:432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529277.683:433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4c66dac797c34cfea93b1ce673addb65 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1748529277.688:434): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-libs-1:3.2.2-6.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529277.688:435): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssh-8.7p1-43.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529277.688:436): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssh-clients-8.7p1-43.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529277.688:437): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssh-server-8.7p1-43.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529277.688:438): pid=11921 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-1:3.2.2-6.el9_5.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529278.137:439): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529278.138:440): pid=11907 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529278.139:441): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529278.139:442): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.139:443): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11906 suid=1000 rport=59856 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.140:444): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529278.141:445): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529278.141:446): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.142:447): pid=11902 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=11902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529278.159:448): pid=13328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529278.160:449): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13328 suid=74 rport=59858 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529278.160:450): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13328 suid=74 rport=59858 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529278.224:451): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529278.224:452): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529278.251:453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529278.251:454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529278.256:455): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529278.257:456): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13328 suid=74 rport=59858 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529278.258:457): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529278.258:458): pid=13327 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529278.258:458): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff824de2b0 a2=4 a3=3e8 items=0 ppid=12358 pid=13327 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529278.258:458): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529278.259:459): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_STOP msg=audit(1748529278.261:460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra343f7de7b72400d95c71c53258e9bba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529278.262:461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4c66dac797c34cfea93b1ce673addb65 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748529278.272:462): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.273:463): pid=13331 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13331 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529278.273:464): pid=13331 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529278.318:465): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529278.318:466): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.319:467): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13332 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529278.382:468): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529278.382:469): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.382:470): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13331 suid=1000 rport=59858 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.383:471): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13331 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529278.384:472): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529278.384:473): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.385:474): pid=13327 uid=0 auid=1000 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529278.401:475): pid=13351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13351 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529278.401:476): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13351 suid=74 rport=59860 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529278.402:477): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13351 suid=74 rport=59860 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529278.461:478): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529278.461:479): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529278.493:480): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529278.493:481): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13351 suid=74 rport=59860 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529278.495:482): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529278.495:483): pid=13350 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529278.495:483): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc64df2cb0 a2=4 a3=3e8 items=0 ppid=12358 pid=13350 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529278.495:483): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529278.496:484): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529278.505:485): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.506:486): pid=13353 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529278.507:487): pid=13353 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529278.550:488): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529278.550:489): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.551:490): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13354 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529278.567:491): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529278.567:492): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.567:493): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13353 suid=1000 rport=59860 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.567:494): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13353 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529278.569:495): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529278.569:496): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529278.569:497): pid=13350 uid=0 auid=1000 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13350 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1748529288.098:498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529288.127:499): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529288.127:500): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1748529288.831:501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529288.841:502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.046:503): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529291.047:504): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13371 suid=74 rport=59882 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529291.047:505): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13371 suid=74 rport=59882 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529291.107:506): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.107:507): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529291.139:508): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.139:509): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13371 suid=74 rport=59882 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529291.141:510): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529291.141:511): pid=13370 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529291.141:511): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe8f33c900 a2=4 a3=3e8 items=0 ppid=12358 pid=13370 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529291.141:511): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529291.142:512): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748529291.156:513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529291.193:514): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1748529291.193:515): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1748529291.194:516): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529291.194:517): pid=13374 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529291.194:517): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc018d9bf0 a2=4 a3=3e8 items=0 ppid=1 pid=13374 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529291.194:517): proctitle="(systemd)"
type=USER_START msg=audit(1748529291.195:518): pid=13374 uid=0 auid=1000 ses=17 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748529291.263:519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748529291.268:520): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.269:521): pid=13383 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529291.270:522): pid=13383 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529291.313:523): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529291.314:524): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.315:525): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.333:526): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13383 suid=1000 rport=59882 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.333:527): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13383 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529291.334:528): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529291.334:529): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529291.335:530): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529291.335:531): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.335:532): pid=13370 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529291.356:533): pid=13399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529291.357:534): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13399 suid=74 rport=59884 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529291.357:535): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13399 suid=74 rport=59884 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529291.416:536): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.416:537): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529291.449:538): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.449:539): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13399 suid=74 rport=59884 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529291.451:540): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529291.451:541): pid=13398 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=18 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529291.451:541): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffca84e7ac0 a2=4 a3=3e8 items=0 ppid=12358 pid=13398 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529291.451:541): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529291.451:542): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529291.462:543): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.463:544): pid=13401 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529291.464:545): pid=13401 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529291.506:546): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529291.506:547): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.507:548): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529291.528:549): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529291.528:550): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.529:551): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13401 suid=1000 rport=59884 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.529:552): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13401 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529291.530:553): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529291.530:554): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.531:555): pid=13398 uid=0 auid=1000 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529291.552:556): pid=13416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529291.553:557): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13416 suid=74 rport=59886 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529291.553:558): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13416 suid=74 rport=59886 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529291.615:559): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.615:560): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529291.646:561): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.647:562): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13416 suid=74 rport=59886 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529291.648:563): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529291.648:564): pid=13415 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=19 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529291.648:564): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd3d95bfb0 a2=4 a3=3e8 items=0 ppid=12358 pid=13415 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529291.648:564): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529291.649:565): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529291.657:566): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.658:567): pid=13418 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529291.659:568): pid=13418 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529291.702:569): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529291.702:570): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.703:571): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.725:572): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13418 suid=1000 rport=59886 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.726:573): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529291.726:574): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529291.727:575): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529291.727:576): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529291.727:577): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.727:578): pid=13415 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529291.742:579): pid=13433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529291.743:580): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13433 suid=74 rport=59888 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529291.743:581): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13433 suid=74 rport=59888 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529291.802:582): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.802:583): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529291.837:584): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.837:585): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13433 suid=74 rport=59888 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529291.838:586): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529291.838:587): pid=13432 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=20 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529291.838:587): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffedb4f2790 a2=4 a3=3e8 items=0 ppid=12358 pid=13432 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529291.838:587): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529291.839:588): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529291.848:589): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.849:590): pid=13435 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529291.850:591): pid=13435 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529291.894:592): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529291.894:593): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.894:594): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13436 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.912:595): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13435 suid=1000 rport=59888 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.912:596): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529291.913:597): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529291.913:598): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529291.914:599): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529291.914:600): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529291.914:601): pid=13432 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13432 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529291.932:602): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529291.933:603): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13452 suid=74 rport=59890 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529291.933:604): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13452 suid=74 rport=59890 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529291.992:605): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529291.992:606): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529292.024:607): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529292.024:608): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13452 suid=74 rport=59890 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529292.026:609): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529292.026:610): pid=13451 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=21 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529292.026:610): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdb6b41b50 a2=4 a3=3e8 items=0 ppid=12358 pid=13451 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529292.026:610): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529292.027:611): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529292.037:612): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.038:613): pid=13455 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529292.039:614): pid=13455 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529292.082:615): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529292.082:616): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.083:617): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529292.098:618): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529292.098:619): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.098:620): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13455 suid=1000 rport=59890 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.099:621): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13455 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529292.100:622): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529292.100:623): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.101:624): pid=13451 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529292.118:625): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529292.119:626): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13470 suid=74 rport=59892 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529292.119:627): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13470 suid=74 rport=59892 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529292.179:628): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529292.179:629): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529292.212:630): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529292.212:631): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13470 suid=74 rport=59892 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529292.213:632): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529292.213:633): pid=13469 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=22 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529292.213:633): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc59f1c470 a2=4 a3=3e8 items=0 ppid=12358 pid=13469 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529292.213:633): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529292.214:634): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529292.223:635): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.223:636): pid=13472 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529292.224:637): pid=13472 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529292.265:638): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529292.266:639): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.266:640): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13473 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529292.316:641): pid=13473 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529292.316:642): pid=13473 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D63207072696E746620225C6E31302E302E302E31323920202020636E2D6A656E6B696E732D6465706C6F792D706C6174666F726D2D616E7369626C652D6B38732D3337302D315C6E22203E3E202F6574632F686F737473 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529292.317:643): pid=13473 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529292.319:644): pid=13473 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529292.322:645): pid=13473 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529292.322:646): pid=13473 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.323:647): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13472 suid=1000 rport=59892 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.323:648): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529292.325:649): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529292.325:650): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529292.325:651): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529292.325:652): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529292.325:653): pid=13469 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529293.194:654): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13490 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529293.195:655): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13490 suid=74 rport=59896 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529293.195:656): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13490 suid=74 rport=59896 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529293.255:657): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529293.255:658): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529293.286:659): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529293.287:660): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13490 suid=74 rport=59896 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529293.288:661): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529293.288:662): pid=13489 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=23 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529293.288:662): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffddce57aa0 a2=4 a3=3e8 items=0 ppid=12358 pid=13489 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529293.288:662): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529293.289:663): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529293.298:664): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529293.299:665): pid=13492 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13492 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529293.300:666): pid=13492 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529293.341:667): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529293.342:668): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529293.342:669): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13493 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529293.545:670): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13492 suid=1000 rport=59896 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529293.545:671): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13492 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529293.547:672): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529293.547:673): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529293.548:674): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529293.548:675): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529293.548:676): pid=13489 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748529293.564:677): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529293.565:678): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13508 suid=74 rport=59898 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529293.565:679): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13508 suid=74 rport=59898 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748529293.628:680): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529293.628:681): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529293.660:682): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529293.660:683): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13508 suid=74 rport=59898 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529293.661:684): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529293.662:685): pid=13507 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=24 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529293.662:685): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff67764c60 a2=4 a3=3e8 items=0 ppid=12358 pid=13507 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529293.662:685): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529293.662:686): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529293.671:687): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529293.671:688): pid=13510 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529293.672:689): pid=13510 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529293.718:690): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529293.718:691): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529293.719:692): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529293.833:693): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529293.833:694): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620636865636B2D757064617465 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529293.833:695): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529293.834:696): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529294.364:697): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529294.365:698): pid=13582 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748529294.400:699): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529294.401:700): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646E6620696E7374616C6C202D79206375726C20707974686F6E3320707974686F6E332D7365747570746F6F6C73206C696273656C696E75782D707974686F6E33206970726F757465206A712062696E642D7574696C7320707974686F6E332D706970206F70656E7373682D736572766572206F70656E7373682D636C69656E747320707974686F6E332D7669727475616C656E76 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529294.401:701): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529294.403:702): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1748529297.714:703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529297.716:704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=MAC_POLICY_LOAD msg=audit(1748529301.550:705): auid=1000 ses=24 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1748529301.550:705): arch=c000003e syscall=1 success=yes exit=3511466 a0=4 a1=7f5722400000 a2=3594aa a3=0 items=0 ppid=13605 pid=13609 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529301.550:705): proctitle="/sbin/load_policy"
type=SERVICE_START msg=audit(1748529302.706:706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rcc1b4bf1b42d427f8dbe4d1db0adebac comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529302.886:707): prog-id=48 op=LOAD
type=BPF msg=audit(1748529302.886:708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529302.888:709): prog-id=49 op=LOAD
type=BPF msg=audit(1748529302.888:710): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529302.888:711): prog-id=50 op=LOAD
type=BPF msg=audit(1748529302.888:712): prog-id=51 op=LOAD
type=BPF msg=audit(1748529302.888:713): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529302.888:714): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529302.888:715): prog-id=52 op=LOAD
type=BPF msg=audit(1748529302.888:716): prog-id=53 op=LOAD
type=BPF msg=audit(1748529302.888:717): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529302.888:718): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529302.890:719): prog-id=54 op=LOAD
type=BPF msg=audit(1748529302.890:720): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529302.890:721): prog-id=55 op=LOAD
type=BPF msg=audit(1748529302.890:722): prog-id=56 op=LOAD
type=BPF msg=audit(1748529302.890:723): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529302.890:724): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529302.891:725): prog-id=57 op=LOAD
type=BPF msg=audit(1748529302.891:726): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1748529302.921:727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r09f3b13678b94f6cb4315a1f3d18d03f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:728): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-libs-3.9.21-1.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:729): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python-unversioned-command-3.9.21-1.el9_5.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:730): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-3.9.21-1.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:731): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-license-32:9.16.23-24.el9_5.3.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:732): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-libs-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:733): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-utils-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:734): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libsepol-3.6-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:735): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libselinux-3.6-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:736): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iproute-6.2.0-6.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:737): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libselinux-utils-3.6-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:738): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-dnssec-doc-32:9.16.23-24.el9_5.3.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:739): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-bind-32:9.16.23-24.el9_5.3.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:740): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-dnssec-utils-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:741): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-distlib-0.3.2-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:742): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-filelock-3.7.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:743): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-platformdirs-2.5.4-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:744): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-setuptools-53.0.0-13.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:745): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="libcurl-7.76.1-31.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:746): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wheel-wheel-1:0.36.2-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:747): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="oniguruma-6.9.6-1.el9.6.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:748): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="jq-1.6-17.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:749): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-virtualenv-20.21.1-14.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:750): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="curl-7.76.1-31.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:751): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pip-21.3.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:752): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="bind-32:9.16.23-24.el9_5.3.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:753): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iproute-tc-6.2.0-6.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529302.938:754): pid=13587 uid=0 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="python3-libselinux-3.6-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe=2F7573722F62696E2F707974686F6E332E39202864656C6574656429 hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529303.461:755): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529303.461:756): pid=13585 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1748529303.630:757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529303.630:758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529303.643:759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rcc1b4bf1b42d427f8dbe4d1db0adebac comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529303.644:760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r09f3b13678b94f6cb4315a1f3d18d03f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529429.474:761): pid=15225 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529429.474:762): pid=15225 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=726D202D7266202F686F6D652F726F636B792F74662D616E7369626C652D6465706C6F796572 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529429.474:763): pid=15225 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529429.477:764): pid=15225 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529429.479:765): pid=15225 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529429.479:766): pid=15225 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748529433.583:767): pid=15344 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529433.584:768): pid=15344 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky/tf-ansible-deployer/playbooks" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64696E7061736A6D73706A7A6E666B6979737863716C7A6E6A756B6179627376203B205049505F425245414B5F53595354454D5F5041434B414745533D31202F686F6D652F726F636B792F2E76656E762F62696E2F707974686F6E33202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393433332E3533303838372D31353333322D3236303231383436343732393135332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529433.584:769): pid=15344 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529433.586:770): pid=15344 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529436.451:771): pid=15344 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529436.452:772): pid=15344 uid=1000 auid=1000 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529442.582:773): pid=15532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748529442.583:774): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15532 suid=74 rport=34774 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748529442.583:775): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15532 suid=74 rport=34774 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1748529442.749:776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1748529442.795:777): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529442.795:778): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748529442.828:779): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748529442.828:780): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15532 suid=74 rport=34774 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748529442.830:781): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748529442.830:782): pid=15531 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=25 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748529442.830:782): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffecd6b68e0 a2=4 a3=3e8 items=0 ppid=12358 pid=15531 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529442.830:782): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748529442.831:783): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529442.843:784): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529442.844:785): pid=15539 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15539 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748529442.845:786): pid=15539 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748529442.887:787): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529442.887:788): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529442.888:789): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15540 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529442.906:790): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529442.906:791): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529442.917:792): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529442.917:793): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529442.918:794): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15554 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529442.939:795): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529442.939:796): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529442.950:797): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529442.950:798): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529442.951:799): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15574 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529442.969:800): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529442.969:801): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529442.979:802): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529442.979:803): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529442.980:804): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529443.025:805): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529443.025:806): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529443.040:807): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529443.040:808): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529443.041:809): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529443.078:810): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529443.078:811): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529443.088:812): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529443.088:813): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529443.088:814): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529443.106:815): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529443.106:816): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529443.116:817): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529443.116:818): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529443.117:819): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15635 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529443.169:820): pid=15650 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529443.169:821): pid=15650 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736D72646B6B7A6466786969616863757076646B7865636B786B6576766E6872203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393434322E393039313332322D31353532392D39363839363236353637373435342F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529443.169:822): pid=15650 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529443.171:823): pid=15650 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529443.733:824): pid=15650 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529443.733:825): pid=15650 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529443.735:826): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529443.735:827): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529443.746:828): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529443.746:829): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529443.747:830): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15683 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529443.765:831): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529443.765:832): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.002:833): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.002:834): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.003:835): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15702 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529444.020:836): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.020:837): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.030:838): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.030:839): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.031:840): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15716 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529444.052:841): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.052:842): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.067:843): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.067:844): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.068:845): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529444.096:846): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.096:847): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.106:848): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.106:849): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.107:850): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15751 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529444.126:851): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.126:852): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.136:853): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.136:854): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.137:855): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15766 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529444.188:856): pid=15781 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529444.188:857): pid=15781 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666377636A6E766F6976747A626A676E676C6462766977656162756A70786767203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393434342E303233363736342D31353730302D3137323237303332313737363830302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529444.189:858): pid=15781 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529444.190:859): pid=15781 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529444.573:860): pid=15781 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529444.573:861): pid=15781 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529444.576:862): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.576:863): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.586:864): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.586:865): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.587:866): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529444.607:867): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.607:868): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.844:869): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.844:870): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.845:871): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15807 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529444.862:872): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.862:873): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.872:874): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.872:875): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.873:876): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15821 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529444.895:877): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.895:878): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.910:879): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.910:880): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.911:881): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15842 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529444.938:882): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.938:883): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.949:884): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.949:885): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.950:886): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15856 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529444.969:887): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529444.969:888): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529444.979:889): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529444.979:890): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529444.980:891): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15871 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529445.031:892): pid=15886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529445.031:893): pid=15886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6478736C696E6E6E75776975646E78646869686D7978796365666F7A636A72203B2068747470735F70726F78793D272720687474705F70726F78793D2727205049505F425245414B5F53595354454D5F5041434B414745533D31202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393434342E383635353339332D31353830352D37333939393930323435363635362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529445.031:894): pid=15886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529445.033:895): pid=15886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529445.696:896): pid=15886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529445.696:897): pid=15886 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529445.699:898): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529445.699:899): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529445.710:900): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529445.710:901): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529445.711:902): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15893 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529445.729:903): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529445.729:904): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529446.555:905): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529446.555:906): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529446.556:907): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15920 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529446.574:908): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529446.574:909): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529446.584:910): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529446.584:911): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529446.585:912): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529446.607:913): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529446.607:914): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529446.624:915): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529446.624:916): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529446.625:917): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15955 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529446.653:918): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529446.653:919): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529446.665:920): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529446.665:921): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529446.666:922): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15969 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529446.686:923): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529446.686:924): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529446.696:925): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529446.696:926): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529446.697:927): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15984 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529446.749:928): pid=15999 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529446.750:929): pid=15999 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F62686C6B766F626D7571727768656B737163646E6B74756B736D6C6C737274203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393434362E353737373139322D31353931382D3138323235373839393833303238352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529446.750:930): pid=15999 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529446.752:931): pid=15999 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529446.983:932): pid=15999 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529446.983:933): pid=15999 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529446.986:934): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529446.986:935): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529446.996:936): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529446.996:937): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529446.997:938): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16005 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529447.017:939): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529447.017:940): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529447.173:941): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529447.173:942): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529447.174:943): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16022 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529447.192:944): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529447.192:945): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529447.201:946): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529447.201:947): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529447.202:948): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16036 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529447.225:949): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529447.225:950): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529447.499:951): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529447.499:952): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529447.500:953): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16057 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529447.538:954): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529447.539:955): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529447.550:956): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529447.550:957): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529447.551:958): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16071 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529447.569:959): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529447.569:960): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529447.580:961): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529447.580:962): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529447.581:963): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16086 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529447.633:964): pid=16101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529447.633:965): pid=16101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B78726A75786366756A76656B736F6C6374616E78716A6C78636667707565203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393434372E313935333437382D31363032302D32393834393139313135323836342F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529447.633:966): pid=16101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529447.635:967): pid=16101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748529448.123:968): prog-id=58 op=LOAD
type=BPF msg=audit(1748529448.123:969): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.125:970): prog-id=59 op=LOAD
type=BPF msg=audit(1748529448.125:971): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.125:972): prog-id=60 op=LOAD
type=BPF msg=audit(1748529448.125:973): prog-id=61 op=LOAD
type=BPF msg=audit(1748529448.125:974): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.125:975): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.125:976): prog-id=62 op=LOAD
type=BPF msg=audit(1748529448.126:977): prog-id=63 op=LOAD
type=BPF msg=audit(1748529448.126:978): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.126:979): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.127:980): prog-id=64 op=LOAD
type=BPF msg=audit(1748529448.127:981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.127:982): prog-id=65 op=LOAD
type=BPF msg=audit(1748529448.127:983): prog-id=66 op=LOAD
type=BPF msg=audit(1748529448.127:984): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.127:985): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.128:986): prog-id=67 op=LOAD
type=BPF msg=audit(1748529448.128:987): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1748529448.143:988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529448.165:989): pid=16101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529448.167:990): pid=16101 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529448.169:991): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529448.169:992): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529448.181:993): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529448.181:994): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529448.182:995): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529448.202:996): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529448.202:997): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529448.243:998): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529448.243:999): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529448.244:1000): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16155 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529448.261:1001): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529448.261:1002): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529448.271:1003): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529448.271:1004): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529448.272:1005): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16169 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529448.294:1006): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529448.294:1007): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529448.310:1008): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529448.310:1009): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529448.311:1010): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16190 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529448.348:1011): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529448.348:1012): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529448.359:1013): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529448.359:1014): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529448.360:1015): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529448.379:1016): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529448.379:1017): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529448.390:1018): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529448.390:1019): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529448.391:1020): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529448.443:1021): pid=16234 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529448.443:1022): pid=16234 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7A6177736B6B707A626E716679707478636F69757A63687869727A677A7676203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393434382E323634353332332D31363032302D3235363933313635343234363436322F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529448.443:1023): pid=16234 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529448.446:1024): pid=16234 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748529448.888:1025): prog-id=68 op=LOAD
type=BPF msg=audit(1748529448.888:1026): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.889:1027): prog-id=69 op=LOAD
type=BPF msg=audit(1748529448.889:1028): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.889:1029): prog-id=70 op=LOAD
type=BPF msg=audit(1748529448.889:1030): prog-id=71 op=LOAD
type=BPF msg=audit(1748529448.889:1031): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.889:1032): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.890:1033): prog-id=72 op=LOAD
type=BPF msg=audit(1748529448.890:1034): prog-id=73 op=LOAD
type=BPF msg=audit(1748529448.890:1035): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.890:1036): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.891:1037): prog-id=74 op=LOAD
type=BPF msg=audit(1748529448.891:1038): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.891:1039): prog-id=75 op=LOAD
type=BPF msg=audit(1748529448.891:1040): prog-id=76 op=LOAD
type=BPF msg=audit(1748529448.891:1041): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.891:1042): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529448.892:1043): prog-id=77 op=LOAD
type=BPF msg=audit(1748529448.892:1044): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1748529448.906:1045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529448.929:1046): pid=16234 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529448.929:1047): pid=16234 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529448.933:1048): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529448.933:1049): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529448.945:1050): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529448.945:1051): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529448.946:1052): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529448.966:1053): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529448.966:1054): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.008:1055): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.008:1056): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.009:1057): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16287 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529449.027:1058): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.027:1059): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.038:1060): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.038:1061): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.039:1062): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16301 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529449.062:1063): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.062:1064): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.078:1065): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.078:1066): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.079:1067): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16322 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529449.117:1068): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.117:1069): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.128:1070): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.128:1071): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.129:1072): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16336 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529449.148:1073): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.148:1074): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.159:1075): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.159:1076): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.160:1077): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16351 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529449.212:1078): pid=16366 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529449.212:1079): pid=16366 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656F6D77737379676B746E7A696E747A67706C73717569647A7578776D717968203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393434392E303330363333342D31363032302D34343536373739333737343836362F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529449.212:1080): pid=16366 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529449.214:1081): pid=16366 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748529449.655:1082): prog-id=78 op=LOAD
type=BPF msg=audit(1748529449.655:1083): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529449.656:1084): prog-id=79 op=LOAD
type=BPF msg=audit(1748529449.656:1085): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529449.656:1086): prog-id=80 op=LOAD
type=BPF msg=audit(1748529449.656:1087): prog-id=81 op=LOAD
type=BPF msg=audit(1748529449.656:1088): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529449.656:1089): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529449.657:1090): prog-id=82 op=LOAD
type=BPF msg=audit(1748529449.657:1091): prog-id=83 op=LOAD
type=BPF msg=audit(1748529449.657:1092): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529449.657:1093): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529449.658:1094): prog-id=84 op=LOAD
type=BPF msg=audit(1748529449.658:1095): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529449.658:1096): prog-id=85 op=LOAD
type=BPF msg=audit(1748529449.658:1097): prog-id=86 op=LOAD
type=BPF msg=audit(1748529449.658:1098): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529449.658:1099): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529449.659:1100): prog-id=87 op=LOAD
type=BPF msg=audit(1748529449.659:1101): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1748529449.674:1102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529449.694:1103): pid=16366 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529449.694:1104): pid=16366 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529449.697:1105): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.697:1106): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.709:1107): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.709:1108): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.710:1109): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16404 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529449.730:1110): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.730:1111): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.768:1112): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.768:1113): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.769:1114): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529449.788:1115): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.788:1116): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.799:1117): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.799:1118): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.800:1119): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16433 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529449.822:1120): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.822:1121): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.838:1122): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.838:1123): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.839:1124): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16454 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529449.879:1125): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.879:1126): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.892:1127): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.892:1128): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.893:1129): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16468 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529449.913:1130): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529449.913:1131): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529449.924:1132): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529449.924:1133): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529449.925:1134): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16483 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529449.979:1135): pid=16498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529449.979:1136): pid=16498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70706A706268756F616A6C6263766B6E636865666F6A77766178746D646E6B72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393434392E373931363930362D31363032302D3234353139393530363035373638302F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529449.980:1137): pid=16498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529449.981:1138): pid=16498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748529450.401:1139): prog-id=88 op=LOAD
type=BPF msg=audit(1748529450.401:1140): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529450.402:1141): prog-id=89 op=LOAD
type=BPF msg=audit(1748529450.402:1142): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529450.402:1143): prog-id=90 op=LOAD
type=BPF msg=audit(1748529450.402:1144): prog-id=91 op=LOAD
type=BPF msg=audit(1748529450.402:1145): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529450.402:1146): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529450.403:1147): prog-id=92 op=LOAD
type=BPF msg=audit(1748529450.403:1148): prog-id=93 op=LOAD
type=BPF msg=audit(1748529450.403:1149): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529450.403:1150): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529450.404:1151): prog-id=94 op=LOAD
type=BPF msg=audit(1748529450.404:1152): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529450.404:1153): prog-id=95 op=LOAD
type=BPF msg=audit(1748529450.404:1154): prog-id=96 op=LOAD
type=BPF msg=audit(1748529450.404:1155): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529450.404:1156): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529450.405:1157): prog-id=97 op=LOAD
type=BPF msg=audit(1748529450.405:1158): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1748529450.416:1159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529450.435:1160): pid=16498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529450.435:1161): pid=16498 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529450.437:1162): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529450.437:1163): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529450.448:1164): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529450.448:1165): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529450.448:1166): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16536 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529450.466:1167): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529450.466:1168): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529450.503:1169): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529450.503:1170): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529450.504:1171): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529450.520:1172): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529450.520:1173): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529450.529:1174): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529450.529:1175): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529450.530:1176): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16565 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529450.550:1177): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529450.550:1178): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529450.564:1179): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529450.564:1180): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529450.565:1181): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529450.601:1182): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529450.601:1183): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529450.611:1184): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529450.611:1185): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529450.612:1186): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16600 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529450.629:1187): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529450.629:1188): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529450.638:1189): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529450.638:1190): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529450.639:1191): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529450.688:1192): pid=16630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529450.688:1193): pid=16630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68757468707979726E6B74746A74746C6F78727975686F6F696A676977626E6B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435302E353233343533322D31363032302D37323733383437313337313838392F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529450.688:1194): pid=16630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529450.690:1195): pid=16630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529450.987:1196): pid=16630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529450.987:1197): pid=16630 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529450.990:1198): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529450.990:1199): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529451.000:1200): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529451.000:1201): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529451.001:1202): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16636 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529451.019:1203): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529451.019:1204): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529451.262:1205): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529451.262:1206): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529451.262:1207): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16654 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529451.279:1208): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529451.279:1209): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529451.288:1210): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529451.288:1211): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529451.289:1212): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16668 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529451.309:1213): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529451.309:1214): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529451.545:1215): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529451.545:1216): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529451.546:1217): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16689 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529451.582:1218): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529451.582:1219): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529451.592:1220): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529451.592:1221): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529451.593:1222): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16703 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529451.610:1223): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529451.610:1224): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529451.620:1225): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529451.620:1226): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529451.621:1227): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529451.671:1228): pid=16733 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529451.671:1229): pid=16733 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776369666D6A7A717A706A7264656D6268786E67617665657573647866726165203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435312E323832333938322D31363635322D39313439343136343131353233352F416E736962616C6C5A5F73656C696E75782E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529451.671:1230): pid=16733 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529451.673:1231): pid=16733 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=MAC_STATUS msg=audit(1748529451.931:1232): enforcing=0 old_enforcing=1 auid=1000 ses=25 enabled=1 old-enabled=1 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1748529451.931:1232): arch=c000003e syscall=1 success=yes exit=1 a0=4 a1=7ffc68148100 a2=1 a3=0 items=0 ppid=16733 pid=16735 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=25 comm="python3.9" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529451.931:1232): proctitle=2F7573722F62696E2F707974686F6E332E39002F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435312E323832333938322D31363635322D39313439343136343131353233352F416E736962616C6C5A5F73656C696E75782E7079
type=USER_END msg=audit(1748529451.956:1233): pid=16733 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529451.956:1234): pid=16733 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529451.958:1235): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529451.958:1236): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529451.968:1237): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529451.968:1238): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529451.969:1239): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529451.986:1240): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529451.986:1241): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529452.669:1242): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529452.669:1243): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529452.670:1244): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16770 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529452.688:1245): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529452.688:1246): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529452.699:1247): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529452.699:1248): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529452.700:1249): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16784 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529452.720:1250): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529452.720:1251): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529452.862:1252): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529452.862:1253): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529452.863:1254): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16805 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529452.890:1255): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529452.890:1256): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529452.900:1257): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529452.900:1258): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529452.901:1259): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16819 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529452.918:1260): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529452.918:1261): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529452.928:1262): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529452.928:1263): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529452.929:1264): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529452.980:1265): pid=16849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529452.980:1266): pid=16849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6965666B6163666372656C657079676E6978786762657A67766D71656D796274203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435322E363931313533382D31363736382D3139333137383235323932363136352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529452.980:1267): pid=16849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529452.982:1268): pid=16849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529453.129:1269): pid=16849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529453.130:1270): pid=16849 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529453.132:1271): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529453.132:1272): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529453.142:1273): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529453.142:1274): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529453.142:1275): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16853 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529453.160:1276): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529453.160:1277): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529453.473:1278): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529453.474:1279): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529453.474:1280): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16874 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529453.491:1281): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529453.491:1282): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529453.500:1283): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529453.500:1284): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529453.501:1285): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16888 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529453.521:1286): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529453.521:1287): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529453.534:1288): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529453.534:1289): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529453.535:1290): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16909 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529453.562:1291): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529453.562:1292): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529453.572:1293): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529453.572:1294): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529453.573:1295): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16923 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529453.591:1296): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529453.591:1297): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529453.600:1298): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529453.601:1299): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529453.601:1300): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529453.650:1301): pid=16953 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529453.650:1302): pid=16953 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6166676D616D6C736F666578786E776A6B70726E786368697867636F6A666868203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435332E343934303433362D31363837322D32313339353430363639303438352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529453.651:1303): pid=16953 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529453.652:1304): pid=16953 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529453.835:1305): pid=16953 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529453.835:1306): pid=16953 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529453.837:1307): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529453.837:1308): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529453.847:1309): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529453.847:1310): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529453.848:1311): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=16959 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529453.867:1312): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529453.867:1313): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529454.837:1314): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529454.838:1315): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529454.838:1316): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17008 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529454.855:1317): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529454.855:1318): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529454.865:1319): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529454.865:1320): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529454.865:1321): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17022 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529454.886:1322): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529454.886:1323): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529454.998:1324): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529454.998:1325): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529454.999:1326): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17043 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529455.026:1327): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529455.026:1328): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529455.036:1329): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529455.036:1330): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529455.037:1331): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17057 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529455.055:1332): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529455.055:1333): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529455.065:1334): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529455.065:1335): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529455.065:1336): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17072 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529455.116:1337): pid=17087 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529455.116:1338): pid=17087 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766D616E636B6A69666B6B706C6B756C7871786E7369746D656D787A63686770203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435342E383538333338382D31373030362D3139313934323037333435353032382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529455.117:1339): pid=17087 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529455.118:1340): pid=17087 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529455.273:1341): pid=17087 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529455.274:1342): pid=17087 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529455.276:1343): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529455.276:1344): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529455.285:1345): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529455.285:1346): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529455.286:1347): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17091 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529455.304:1348): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529455.304:1349): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529455.727:1350): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529455.727:1351): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529455.728:1352): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17120 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529455.744:1353): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529455.744:1354): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529455.754:1355): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529455.754:1356): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529455.754:1357): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529455.774:1358): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529455.774:1359): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529455.916:1360): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529455.916:1361): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529455.917:1362): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17155 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529455.944:1363): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529455.944:1364): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529455.954:1365): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529455.954:1366): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529455.955:1367): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17169 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529455.974:1368): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529455.974:1369): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529455.986:1370): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529455.986:1371): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529455.987:1372): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17184 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529456.037:1373): pid=17199 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529456.037:1374): pid=17199 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D67626D6E6E6C6C617267777A716667616C64637A7A666B70756571746A646E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435352E3734373532312D31373131382D3234333439333538343337363834392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529456.037:1375): pid=17199 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529456.039:1376): pid=17199 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529456.216:1377): pid=17199 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529456.217:1378): pid=17199 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529456.219:1379): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529456.219:1380): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529456.229:1381): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529456.229:1382): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529456.230:1383): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529456.247:1384): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529456.247:1385): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529456.394:1386): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529456.394:1387): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529456.395:1388): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17220 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529456.412:1389): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529456.412:1390): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529456.421:1391): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529456.421:1392): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529456.422:1393): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529456.442:1394): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529456.442:1395): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529456.574:1396): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529456.574:1397): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529456.575:1398): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17255 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529456.603:1399): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529456.603:1400): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529456.613:1401): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529456.613:1402): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529456.614:1403): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17269 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529456.632:1404): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529456.632:1405): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529456.642:1406): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529456.642:1407): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529456.643:1408): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17284 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529456.693:1409): pid=17299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529456.694:1410): pid=17299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A757A69707077617668747A6C6C776167706F756D6F6E6B7976766F74667079203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435362E343135313435362D31373231382D3134343536393034383932323332332F416E736962616C6C5A5F6D6F6470726F62652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529456.694:1411): pid=17299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529456.696:1412): pid=17299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529456.906:1413): pid=17299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529456.906:1414): pid=17299 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529456.908:1415): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529456.908:1416): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529456.918:1417): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529456.918:1418): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529456.919:1419): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529456.938:1420): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529456.938:1421): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.082:1422): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.082:1423): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.083:1424): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17324 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.102:1425): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.102:1426): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.112:1427): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.112:1428): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.113:1429): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17338 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.134:1430): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.134:1431): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.149:1432): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.149:1433): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.150:1434): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.177:1435): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.177:1436): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.187:1437): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.187:1438): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.187:1439): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17373 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.205:1440): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.205:1441): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.214:1442): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.214:1443): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.215:1444): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529457.265:1445): pid=17403 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529457.266:1446): pid=17403 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67766D6C7462616B626B646269776179676B767779696B627464726678746362203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435372E3130353437362D31373332322D3130353638333337373434363732312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529457.266:1447): pid=17403 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529457.268:1448): pid=17403 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529457.430:1449): pid=17403 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529457.430:1450): pid=17403 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529457.432:1451): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.432:1452): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.442:1453): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.442:1454): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.443:1455): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17409 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.460:1456): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.460:1457): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.627:1458): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.627:1459): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.628:1460): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17426 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.645:1461): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.645:1462): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.653:1463): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.653:1464): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.654:1465): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17440 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.674:1466): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.674:1467): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.689:1468): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.689:1469): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.689:1470): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17461 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.716:1471): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.716:1472): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.726:1473): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.726:1474): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.727:1475): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17475 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.744:1476): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.744:1477): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.754:1478): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.754:1479): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.755:1480): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17490 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529457.804:1481): pid=17505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529457.804:1482): pid=17505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7878706E7165756A6A62696D6A6F71796178756D686B6A61717A6C6170676370203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435372E363437383134352D31373432342D3230343538373430303837333434392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529457.804:1483): pid=17505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529457.805:1484): pid=17505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529457.963:1485): pid=17505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529457.964:1486): pid=17505 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529457.966:1487): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.966:1488): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529457.975:1489): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529457.975:1490): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529457.976:1491): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529457.994:1492): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529457.994:1493): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.163:1494): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.163:1495): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.164:1496): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17528 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529458.181:1497): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.181:1498): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.190:1499): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.190:1500): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.191:1501): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529458.211:1502): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.211:1503): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.324:1504): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.324:1505): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.324:1506): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17563 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529458.352:1507): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.352:1508): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.362:1509): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.362:1510): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.363:1511): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17577 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529458.387:1512): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.387:1513): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.398:1514): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.398:1515): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.399:1516): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529458.450:1517): pid=17607 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529458.450:1518): pid=17607 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637577756A6A61706373696177646971616B6D656D6A6177796A777263697162203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435382E3138343331342D31373532362D3236393438363533303135303139342F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529458.450:1519): pid=17607 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529458.452:1520): pid=17607 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529458.681:1521): pid=17607 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529458.681:1522): pid=17607 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529458.683:1523): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.683:1524): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.693:1525): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.693:1526): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.694:1527): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17614 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529458.711:1528): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.711:1529): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.855:1530): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.855:1531): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.856:1532): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17631 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529458.873:1533): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.873:1534): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.882:1535): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.882:1536): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.882:1537): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17645 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529458.902:1538): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.902:1539): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.917:1540): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.917:1541): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.918:1542): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17666 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529458.945:1543): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.945:1544): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.954:1545): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.954:1546): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.955:1547): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17680 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529458.972:1548): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529458.972:1549): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529458.982:1550): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529458.982:1551): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529458.983:1552): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17695 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529459.034:1553): pid=17710 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529459.034:1554): pid=17710 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C676974766661796679626762746E6172767567736E776667727162617762203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435382E3837353639342D31373632392D37323838303436353431343836352F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529459.034:1555): pid=17710 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529459.035:1556): pid=17710 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529459.201:1557): pid=17710 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529459.201:1558): pid=17710 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529459.204:1559): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529459.204:1560): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529459.213:1561): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529459.213:1562): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529459.213:1563): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17717 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529459.231:1564): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529459.231:1565): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529459.411:1566): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529459.411:1567): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529459.412:1568): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17734 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529459.428:1569): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529459.428:1570): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529459.437:1571): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529459.437:1572): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529459.438:1573): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17748 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529459.457:1574): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529459.457:1575): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529459.470:1576): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529459.470:1577): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529459.471:1578): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17769 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529459.497:1579): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529459.497:1580): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529459.507:1581): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529459.507:1582): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529459.508:1583): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17783 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529459.525:1584): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529459.525:1585): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529459.534:1586): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529459.534:1587): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529459.535:1588): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17798 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529459.585:1589): pid=17813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529459.586:1590): pid=17813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A6D61776475636C6D7575696A7364757A76646D62686A6C6666776976636C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393435392E343331333531322D31373733322D3138393933323033393339303135342F416E736962616C6C5A5F73797363746C2E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529459.586:1591): pid=17813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529459.587:1592): pid=17813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529459.745:1593): pid=17813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529459.745:1594): pid=17813 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529459.747:1595): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529459.747:1596): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529459.756:1597): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529459.756:1598): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529459.757:1599): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529459.774:1600): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529459.774:1601): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.089:1602): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.089:1603): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.090:1604): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17839 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529460.109:1605): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.109:1606): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.118:1607): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.118:1608): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.119:1609): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17853 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529460.141:1610): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.141:1611): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.157:1612): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.157:1613): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.158:1614): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17874 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529460.195:1615): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.195:1616): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.205:1617): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.205:1618): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.206:1619): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17888 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529460.223:1620): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.223:1621): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.232:1622): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.232:1623): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.233:1624): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529460.282:1625): pid=17918 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529460.282:1626): pid=17918 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C656F767678646B62626874626B72766679777A7478657A786D696F666564203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393436302E313132343232322D31373833372D3139353237343036333434353433322F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529460.283:1627): pid=17918 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529460.284:1628): pid=17918 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529460.569:1629): pid=17918 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529460.569:1630): pid=17918 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529460.570:1631): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.570:1632): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.580:1633): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.580:1634): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.580:1635): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17923 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529460.598:1636): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.598:1637): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.760:1638): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.760:1639): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.761:1640): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17940 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529460.778:1641): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.778:1642): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.786:1643): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.786:1644): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.787:1645): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17954 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529460.807:1646): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.807:1647): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.820:1648): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.821:1649): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.821:1650): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17975 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529460.849:1651): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.849:1652): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.859:1653): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.859:1654): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.860:1655): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=17989 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529460.877:1656): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529460.877:1657): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529460.886:1658): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529460.886:1659): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529460.887:1660): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18004 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529460.940:1661): pid=18019 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529460.940:1662): pid=18019 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6175726D61636375756C6764756B6A737A67747A77777A756C677570746E71203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393436302E373830363731382D31373933382D34333339333432353334383533362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529460.940:1663): pid=18019 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529460.942:1664): pid=18019 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529461.103:1665): pid=18019 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529461.103:1666): pid=18019 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529461.105:1667): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529461.105:1668): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529461.115:1669): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529461.115:1670): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529461.117:1671): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18024 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529461.137:1672): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529461.137:1673): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529461.306:1674): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529461.306:1675): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529461.307:1676): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529461.324:1677): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529461.324:1678): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529461.333:1679): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529461.333:1680): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529461.334:1681): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18055 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529461.356:1682): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529461.356:1683): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529461.370:1684): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529461.370:1685): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529461.370:1686): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529461.397:1687): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529461.397:1688): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529461.407:1689): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529461.407:1690): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529461.408:1691): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18090 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529461.425:1692): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529461.425:1693): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529461.434:1694): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529461.434:1695): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529461.435:1696): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529461.484:1697): pid=18120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529461.484:1698): pid=18120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796F666F72746F68716E6C7A6C747368756B666F6B6862716377766A78696369203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393436312E3332373239322D31383033392D3133343430353733393739383435302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529461.485:1699): pid=18120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529461.486:1700): pid=18120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529461.638:1701): pid=18120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529461.639:1702): pid=18120 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529461.640:1703): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529461.640:1704): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529461.649:1705): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529461.649:1706): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529461.650:1707): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18125 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529461.667:1708): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529461.667:1709): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529462.053:1710): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529462.053:1711): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529462.054:1712): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18146 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529462.070:1713): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529462.071:1714): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529462.080:1715): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529462.080:1716): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529462.081:1717): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18160 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529462.103:1718): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529462.103:1719): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529462.118:1720): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529462.118:1721): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529462.119:1722): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18181 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529462.147:1723): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529462.147:1724): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529462.157:1725): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529462.157:1726): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529462.158:1727): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18195 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529462.177:1728): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529462.177:1729): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529462.187:1730): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529462.187:1731): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529462.188:1732): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18210 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529462.236:1733): pid=18225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529462.237:1734): pid=18225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69786D68626D6B6B786D75626C697771747174777A6663777861766373706462203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393436322E303733373430322D31383134342D3230373833303238313330373537352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529462.237:1735): pid=18225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529462.238:1736): pid=18225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529462.704:1737): pid=18225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529462.704:1738): pid=18225 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529462.706:1739): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529462.706:1740): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529462.716:1741): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529462.716:1742): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529462.717:1743): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529462.734:1744): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529462.734:1745): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529462.897:1746): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529462.897:1747): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529462.898:1748): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529462.914:1749): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529462.914:1750): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529462.924:1751): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529462.924:1752): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529462.925:1753): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529462.947:1754): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529462.947:1755): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529463.124:1756): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529463.124:1757): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529463.125:1758): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529463.154:1759): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529463.154:1760): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529463.165:1761): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529463.165:1762): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529463.166:1763): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529463.184:1764): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529463.184:1765): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529463.193:1766): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529463.194:1767): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529463.194:1768): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=18315 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529463.244:1769): pid=18330 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529463.244:1770): pid=18330 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72677365716B627769786E67686969686367737961736D6C677A6F6E6D70656C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393436322E3931373735352D31383234392D3132343833383837373137333331302F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529463.245:1771): pid=18330 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529463.246:1772): pid=18330 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=MAC_CONFIG_CHANGE msg=audit(1748529470.999:1773): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=25AUID="rocky"
type=SYSCALL msg=audit(1748529470.999:1773): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffb9a5b44e a2=2 a3=0 items=0 ppid=18381 pid=18382 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=25 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529470.999:1773): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31
type=MAC_POLICY_LOAD msg=audit(1748529479.971:1774): auid=1000 ses=25 lsm=selinux res=1AUID="rocky"
type=SYSCALL msg=audit(1748529479.971:1774): arch=c000003e syscall=1 success=yes exit=3537681 a0=4 a1=7f066aa00000 a2=35fb11 a3=0 items=0 ppid=18381 pid=18395 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=25 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529479.971:1774): proctitle="/usr/sbin/load_policy"
type=ADD_GROUP msg=audit(1748529481.428:1775): pid=18404 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker"
type=GRP_MGMT msg=audit(1748529481.433:1776): pid=18404 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" ID="docker"
type=SERVICE_START msg=audit(1748529493.897:1777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r41a67d428a2d4a1cbe7a38314e7957aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529494.116:1778): prog-id=98 op=LOAD
type=BPF msg=audit(1748529494.116:1779): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529494.118:1780): prog-id=99 op=LOAD
type=BPF msg=audit(1748529494.118:1781): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529494.118:1782): prog-id=100 op=LOAD
type=BPF msg=audit(1748529494.118:1783): prog-id=101 op=LOAD
type=BPF msg=audit(1748529494.118:1784): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529494.118:1785): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529494.119:1786): prog-id=102 op=LOAD
type=BPF msg=audit(1748529494.119:1787): prog-id=103 op=LOAD
type=BPF msg=audit(1748529494.119:1788): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529494.119:1789): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529494.121:1790): prog-id=104 op=LOAD
type=BPF msg=audit(1748529494.121:1791): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529494.122:1792): prog-id=105 op=LOAD
type=BPF msg=audit(1748529494.122:1793): prog-id=106 op=LOAD
type=BPF msg=audit(1748529494.122:1794): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529494.122:1795): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529494.123:1796): prog-id=107 op=LOAD
type=BPF msg=audit(1748529494.123:1797): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1748529494.158:1798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r3832bf2025d04612aa398cc859ebefbf comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1799): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-buildx-plugin-0:0.24.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1800): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-compose-plugin-0:2.36.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1801): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1802): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.232.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1803): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containerd.io-1.7.27-3.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1804): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-cli-1:28.2.1-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1805): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="iptables-libs-1.8.10-11.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1806): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-legacy-libs-1.8.10-11.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1807): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-legacy-1.8.10-11.1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1808): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libslirp-4.4.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.164:1809): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="slirp4netns-1.3.1-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.165:1810): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.165:1811): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-9.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.165:1812): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.14-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.165:1813): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-3:25.0.3-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529494.165:1814): pid=18332 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="docker-ce-rootless-extras-0:28.2.1-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748529494.820:1815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529494.820:1816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529494.835:1817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r41a67d428a2d4a1cbe7a38314e7957aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529494.836:1818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r3832bf2025d04612aa398cc859ebefbf comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529495.037:1819): pid=18330 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529495.037:1820): pid=18330 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529495.040:1821): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529495.040:1822): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529495.051:1823): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529495.051:1824): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529495.052:1825): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20375 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529495.071:1826): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529495.071:1827): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529495.223:1828): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529495.223:1829): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529495.224:1830): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20392 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529495.241:1831): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529495.241:1832): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529495.250:1833): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529495.250:1834): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529495.251:1835): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20406 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529495.272:1836): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529495.272:1837): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529495.286:1838): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529495.286:1839): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529495.287:1840): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20427 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529495.316:1841): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529495.317:1842): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529495.326:1843): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529495.326:1844): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529495.327:1845): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20441 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529495.345:1846): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529495.345:1847): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529495.355:1848): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529495.355:1849): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529495.356:1850): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529495.408:1851): pid=20471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529495.408:1852): pid=20471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616772716F6A746D76706B7A7174716B73617266796D6B67686366667A6A6C7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393439352E323434303638312D32303339302D3236333235343731313032383036362F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529495.409:1853): pid=20471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529495.412:1854): pid=20471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748529496.752:1855): prog-id=108 op=LOAD
type=BPF msg=audit(1748529496.752:1856): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529496.754:1857): prog-id=109 op=LOAD
type=BPF msg=audit(1748529496.754:1858): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529496.754:1859): prog-id=110 op=LOAD
type=BPF msg=audit(1748529496.754:1860): prog-id=111 op=LOAD
type=BPF msg=audit(1748529496.754:1861): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529496.754:1862): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529496.754:1863): prog-id=112 op=LOAD
type=BPF msg=audit(1748529496.754:1864): prog-id=113 op=LOAD
type=BPF msg=audit(1748529496.754:1865): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529496.754:1866): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529496.756:1867): prog-id=114 op=LOAD
type=BPF msg=audit(1748529496.756:1868): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529496.757:1869): prog-id=115 op=LOAD
type=BPF msg=audit(1748529496.757:1870): prog-id=116 op=LOAD
type=BPF msg=audit(1748529496.757:1871): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529496.757:1872): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529496.757:1873): prog-id=117 op=LOAD
type=BPF msg=audit(1748529496.757:1874): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1748529496.778:1875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd4868387996c4804bce6654bdd59cdef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1748529496.793:1876): pid=20473 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="cloud-init-22.1-9.el9.0.2.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529496.793:1877): pid=20473 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="cockpit-system-286.1-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529496.793:1878): pid=20473 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="sos-4.5.1-3.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529496.793:1879): pid=20473 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="nfs-utils-1:2.5.4-18.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529496.793:1880): pid=20473 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="python3-pyyaml-5.4.1-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529497.187:1881): pid=20471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529497.188:1882): pid=20471 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529497.190:1883): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529497.190:1884): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529497.201:1885): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529497.201:1886): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529497.201:1887): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20762 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529497.220:1888): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529497.220:1889): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_START msg=audit(1748529497.284:1890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529497.284:1891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529497.302:1892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd4868387996c4804bce6654bdd59cdef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1748529497.384:1893): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529497.384:1894): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529497.385:1895): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20781 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529497.402:1896): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529497.402:1897): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529497.412:1898): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529497.412:1899): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529497.413:1900): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20795 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529497.433:1901): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529497.433:1902): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529497.447:1903): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529497.447:1904): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529497.448:1905): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20816 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529497.475:1906): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529497.475:1907): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529497.485:1908): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529497.485:1909): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529497.485:1910): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20830 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529497.503:1911): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529497.503:1912): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529497.513:1913): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529497.513:1914): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529497.514:1915): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20845 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529497.566:1916): pid=20860 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529497.566:1917): pid=20860 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D636B636B616263686C6A64717A6166646E6678627677636A697370796564203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393439372E343035313233352D32303737372D33383239383938303231323838362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529497.567:1918): pid=20860 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529497.569:1919): pid=20860 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529498.304:1920): pid=20860 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529498.304:1921): pid=20860 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529498.307:1922): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529498.307:1923): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529498.317:1924): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529498.317:1925): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529498.318:1926): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20867 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529498.336:1927): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529498.336:1928): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529498.501:1929): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529498.501:1930): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529498.501:1931): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20884 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529498.518:1932): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529498.518:1933): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529498.527:1934): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529498.527:1935): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529498.527:1936): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20898 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529498.547:1937): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529498.547:1938): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529498.561:1939): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529498.561:1940): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529498.562:1941): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529498.589:1942): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529498.589:1943): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529498.599:1944): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529498.599:1945): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529498.600:1946): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20933 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529498.617:1947): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529498.617:1948): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529498.627:1949): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529498.627:1950): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529498.628:1951): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20948 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529498.678:1952): pid=20963 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529498.678:1953): pid=20963 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796B7371777178736B6477656779777A6165716D6C766E726A727A64636D6178203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393439382E353230383735352D32303838322D3136393339333534393733353430392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529498.679:1954): pid=20963 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529498.680:1955): pid=20963 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529503.122:1956): pid=20963 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529503.122:1957): pid=20963 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529503.125:1958): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529503.125:1959): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529503.135:1960): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529503.135:1961): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529503.135:1962): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529503.152:1963): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529503.152:1964): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529503.443:1965): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529503.443:1966): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529503.444:1967): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=20999 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529503.461:1968): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529503.461:1969): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529503.470:1970): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529503.470:1971): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529503.471:1972): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21013 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529503.490:1973): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529503.490:1974): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529503.504:1975): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529503.505:1976): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529503.505:1977): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529503.532:1978): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529503.532:1979): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529503.542:1980): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529503.542:1981): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529503.543:1982): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529503.560:1983): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529503.560:1984): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529503.569:1985): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529503.569:1986): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529503.570:1987): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21063 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529503.619:1988): pid=21078 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529503.619:1989): pid=21078 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A677168697A676D6B75687569626A7465736670796E767169737266667A6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393530332E343633393239372D32303939372D3132353835313630373337313237342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529503.620:1990): pid=21078 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529503.622:1991): pid=21078 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529503.780:1992): pid=21078 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529503.781:1993): pid=21078 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529503.783:1994): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529503.783:1995): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529503.792:1996): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529503.792:1997): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529503.793:1998): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529503.810:1999): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529503.810:2000): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529503.976:2001): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529503.976:2002): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529503.977:2003): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21099 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529503.993:2004): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529503.993:2005): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.002:2006): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.002:2007): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.003:2008): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529504.023:2009): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.023:2010): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.037:2011): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.037:2012): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.038:2013): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529504.066:2014): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.066:2015): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.076:2016): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.076:2017): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.076:2018): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21148 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529504.094:2019): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.094:2020): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.103:2021): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.103:2022): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.104:2023): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529504.155:2024): pid=21178 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529504.155:2025): pid=21178 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6F69786373757A746B6F6965706667626D6D6C676A61686F7A756167656E63203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393530332E393936353338362D32313039372D3230303236353036363130333832352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529504.156:2026): pid=21178 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529504.157:2027): pid=21178 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529504.319:2028): pid=21178 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529504.319:2029): pid=21178 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529504.321:2030): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.321:2031): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.331:2032): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.331:2033): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.332:2034): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529504.351:2035): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.351:2036): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.529:2037): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.529:2038): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.530:2039): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21199 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529504.550:2040): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.550:2041): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.559:2042): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.560:2043): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.560:2044): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21213 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529504.580:2045): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.580:2046): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.594:2047): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.594:2048): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.595:2049): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529504.621:2050): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.621:2051): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.630:2052): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.630:2053): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.631:2054): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21248 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529504.649:2055): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.649:2056): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.658:2057): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.658:2058): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.659:2059): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21263 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529504.707:2060): pid=21278 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529504.707:2061): pid=21278 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62777166677A61687468666569686878696467727864697370757166667A686F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393530342E353533343232352D32313139372D3236393939303732383237393338372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529504.708:2062): pid=21278 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529504.709:2063): pid=21278 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529504.862:2064): pid=21278 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529504.862:2065): pid=21278 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529504.864:2066): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.864:2067): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529504.873:2068): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529504.873:2069): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529504.874:2070): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529504.893:2071): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529504.893:2072): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529505.538:2073): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529505.538:2074): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529505.539:2075): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21306 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529505.556:2076): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529505.556:2077): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529505.565:2078): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529505.565:2079): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529505.566:2080): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21320 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529505.588:2081): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529505.588:2082): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529505.602:2083): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529505.602:2084): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529505.603:2085): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21341 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529505.633:2086): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529505.633:2087): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529505.643:2088): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529505.643:2089): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529505.644:2090): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21355 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529505.661:2091): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529505.661:2092): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529505.671:2093): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529505.671:2094): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529505.672:2095): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21370 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529505.723:2096): pid=21385 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529505.723:2097): pid=21385 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71747769796A6B716E726C6263686573717968617269676A65676C6C61746D63203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393530352E353539323534362D32313330342D3133353634363135303939343335322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529505.723:2098): pid=21385 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529505.725:2099): pid=21385 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529505.881:2100): pid=21385 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529505.882:2101): pid=21385 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529505.884:2102): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529505.884:2103): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529505.898:2104): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529505.898:2105): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529505.898:2106): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21392 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529505.917:2107): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529505.917:2108): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529505.927:2109): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529505.927:2110): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529505.928:2111): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21406 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529505.945:2112): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529505.945:2113): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529506.061:2114): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529506.061:2115): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529506.062:2116): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21422 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529506.089:2117): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529506.089:2118): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529506.099:2119): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529506.099:2120): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529506.100:2121): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21436 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529506.120:2122): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529506.120:2123): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529506.131:2124): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529506.131:2125): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529506.132:2126): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21451 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529506.181:2127): pid=21466 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529506.181:2128): pid=21466 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6674646A6563656F697A6178767076727370786C7971687A6C6E697676716761203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393530352E353539323534362D32313330342D3133353634363135303939343335322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529506.182:2129): pid=21466 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529506.183:2130): pid=21466 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529506.340:2131): pid=21466 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529506.340:2132): pid=21466 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529506.343:2133): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529506.343:2134): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529506.354:2135): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529506.354:2136): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529506.355:2137): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21470 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529506.372:2138): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529506.372:2139): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529506.519:2140): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529506.519:2141): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529506.520:2142): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21487 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529506.537:2143): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529506.537:2144): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529506.546:2145): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529506.546:2146): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529506.547:2147): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529506.567:2148): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529506.567:2149): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529506.580:2150): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529506.580:2151): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529506.581:2152): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21522 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529506.608:2153): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529506.608:2154): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529506.618:2155): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529506.618:2156): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529506.619:2157): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21536 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529506.637:2158): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529506.637:2159): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529506.646:2160): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529506.646:2161): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529506.647:2162): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529506.696:2163): pid=21566 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529506.696:2164): pid=21566 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7269727A687A79797768707377786B7661646B746D6F6761656E74687864796F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393530362E353339373930392D32313438352D3131343837313033383331373038362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529506.697:2165): pid=21566 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529506.698:2166): pid=21566 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748529506.985:2167): prog-id=118 op=LOAD
type=BPF msg=audit(1748529506.985:2168): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529506.986:2169): prog-id=119 op=LOAD
type=BPF msg=audit(1748529506.986:2170): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529506.986:2171): prog-id=120 op=LOAD
type=BPF msg=audit(1748529506.986:2172): prog-id=121 op=LOAD
type=BPF msg=audit(1748529506.986:2173): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529506.986:2174): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529506.987:2175): prog-id=122 op=LOAD
type=BPF msg=audit(1748529506.987:2176): prog-id=123 op=LOAD
type=BPF msg=audit(1748529506.987:2177): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529506.987:2178): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529506.988:2179): prog-id=124 op=LOAD
type=BPF msg=audit(1748529506.988:2180): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529506.988:2181): prog-id=125 op=LOAD
type=BPF msg=audit(1748529506.988:2182): prog-id=126 op=LOAD
type=BPF msg=audit(1748529506.989:2183): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529506.989:2184): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529506.989:2185): prog-id=127 op=LOAD
type=BPF msg=audit(1748529506.989:2186): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748529507.007:2187): pid=21566 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529507.007:2188): pid=21566 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529507.009:2189): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529507.009:2190): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529507.019:2191): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529507.019:2192): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529507.020:2193): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529507.040:2194): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529507.040:2195): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529507.191:2196): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529507.191:2197): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529507.192:2198): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529507.209:2199): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529507.209:2200): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529507.219:2201): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529507.219:2202): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529507.220:2203): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21623 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529507.241:2204): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529507.241:2205): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529507.255:2206): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529507.255:2207): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529507.256:2208): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529507.292:2209): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529507.292:2210): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529507.302:2211): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529507.302:2212): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529507.303:2213): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21658 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529507.321:2214): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529507.321:2215): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529507.330:2216): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529507.330:2217): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529507.331:2218): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21673 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529507.382:2219): pid=21688 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529507.382:2220): pid=21688 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7867767178726F7564657A75736E7961657A7771676A667579716672786F6969203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393530372E323132373134322D32313630372D32303932353737333936373039312F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529507.382:2221): pid=21688 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529507.384:2222): pid=21688 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748529507.823:2223): prog-id=128 op=LOAD
type=BPF msg=audit(1748529507.823:2224): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.823:2225): prog-id=129 op=LOAD
type=BPF msg=audit(1748529507.823:2226): prog-id=130 op=LOAD
type=BPF msg=audit(1748529507.823:2227): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.823:2228): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.823:2229): prog-id=131 op=LOAD
type=BPF msg=audit(1748529507.823:2230): prog-id=132 op=LOAD
type=BPF msg=audit(1748529507.823:2231): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.823:2232): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.824:2233): prog-id=133 op=LOAD
type=BPF msg=audit(1748529507.824:2234): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.825:2235): prog-id=134 op=LOAD
type=BPF msg=audit(1748529507.825:2236): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.825:2237): prog-id=135 op=LOAD
type=BPF msg=audit(1748529507.825:2238): prog-id=136 op=LOAD
type=BPF msg=audit(1748529507.825:2239): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.825:2240): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.826:2241): prog-id=137 op=LOAD
type=BPF msg=audit(1748529507.826:2242): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.827:2243): prog-id=138 op=LOAD
type=BPF msg=audit(1748529507.827:2244): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.828:2245): prog-id=139 op=LOAD
type=BPF msg=audit(1748529507.828:2246): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.828:2247): prog-id=140 op=LOAD
type=BPF msg=audit(1748529507.828:2248): prog-id=141 op=LOAD
type=BPF msg=audit(1748529507.828:2249): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.828:2250): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.829:2251): prog-id=142 op=LOAD
type=BPF msg=audit(1748529507.829:2252): prog-id=143 op=LOAD
type=BPF msg=audit(1748529507.829:2253): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.829:2254): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.831:2255): prog-id=144 op=LOAD
type=BPF msg=audit(1748529507.831:2256): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.831:2257): prog-id=145 op=LOAD
type=BPF msg=audit(1748529507.831:2258): prog-id=146 op=LOAD
type=BPF msg=audit(1748529507.831:2259): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.831:2260): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529507.832:2261): prog-id=147 op=LOAD
type=BPF msg=audit(1748529507.832:2262): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1748529507.930:2263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1748529508.128:2264): table=filter family=2 entries=0 op=xt_register pid=21754 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1748529508.128:2264): arch=c000003e syscall=175 success=yes exit=0 a0=55c9b9d63490 a1=e90e a2=55c9b951e962 a3=5 items=0 ppid=36 pid=21754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.128:2264): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572
type=NETFILTER_CFG msg=audit(1748529508.178:2265): table=nat family=2 entries=0 op=xt_register pid=21758 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1748529508.178:2265): arch=c000003e syscall=175 success=yes exit=0 a0=555c5e7beb90 a1=edfe a2=555c5d5be962 a3=5 items=0 ppid=36 pid=21758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.178:2265): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174
type=NETFILTER_CFG msg=audit(1748529508.194:2266): table=nat family=2 entries=5 op=xt_replace pid=21774 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.194:2266): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b35122aa80 items=0 ppid=21731 pid=21774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.194:2266): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552
type=NETFILTER_CFG msg=audit(1748529508.195:2267): table=filter family=2 entries=4 op=xt_replace pid=21776 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.195:2267): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562db69b2960 items=0 ppid=21731 pid=21776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.195:2267): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552
type=NETFILTER_CFG msg=audit(1748529508.197:2268): table=filter family=2 entries=6 op=xt_replace pid=21778 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.197:2268): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ee1477ab50 items=0 ppid=21731 pid=21778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.197:2268): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31
type=NETFILTER_CFG msg=audit(1748529508.199:2269): table=filter family=2 entries=8 op=xt_replace pid=21780 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.199:2269): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560640029d30 items=0 ppid=21731 pid=21780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.199:2269): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32
type=NETFILTER_CFG msg=audit(1748529508.200:2270): table=filter family=2 entries=10 op=xt_replace pid=21782 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.200:2270): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563bafac35a0 items=0 ppid=21731 pid=21782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.200:2270): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1748529508.202:2271): table=filter family=2 entries=11 op=xt_replace pid=21784 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.202:2271): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55734b905720 items=0 ppid=21731 pid=21784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.202:2271): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1748529508.203:2272): table=filter family=2 entries=12 op=xt_replace pid=21785 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.203:2272): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560e34d4e120 items=0 ppid=21731 pid=21785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.203:2272): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D5000464F52574152440044524F50
type=NETFILTER_CFG msg=audit(1748529508.215:2273): table=filter family=2 entries=12 op=xt_replace pid=21787 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.215:2273): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c82f6ce1e0 items=0 ppid=21731 pid=21787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.215:2273): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1748529508.217:2274): table=filter family=2 entries=14 op=xt_replace pid=21789 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.217:2274): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ba63588a70 items=0 ppid=21731 pid=21789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.217:2274): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1748529508.219:2275): table=filter family=2 entries=15 op=xt_replace pid=21791 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.219:2275): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b08140dbf0 items=0 ppid=21731 pid=21791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.219:2275): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1748529508.229:2276): table=filter family=2 entries=16 op=xt_replace pid=21795 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.229:2276): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556cafe16e10 items=0 ppid=21731 pid=21795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.229:2276): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1748529508.230:2277): table=filter family=2 entries=15 op=xt_replace pid=21796 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.230:2277): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558470a05bf0 items=0 ppid=21731 pid=21796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.230:2277): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1748529508.257:2278): table=nat family=2 entries=7 op=xt_replace pid=21804 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.257:2278): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5581315e3990 items=0 ppid=21731 pid=21804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.257:2278): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445
type=NETFILTER_CFG msg=audit(1748529508.259:2279): table=nat family=2 entries=8 op=xt_replace pid=21806 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.259:2279): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55bdd34574b0 items=0 ppid=21731 pid=21806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.259:2279): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1748529508.262:2280): table=filter family=2 entries=16 op=xt_replace pid=21810 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.262:2280): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561d7e854d60 items=0 ppid=21731 pid=21810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.262:2280): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054
type=NETFILTER_CFG msg=audit(1748529508.264:2281): table=filter family=2 entries=17 op=xt_replace pid=21812 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.264:2281): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5561ff8c3ed0 items=0 ppid=21731 pid=21812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.264:2281): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054
type=NETFILTER_CFG msg=audit(1748529508.266:2282): table=nat family=2 entries=9 op=xt_replace pid=21814 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.266:2282): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fac5031330 items=0 ppid=21731 pid=21814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.266:2282): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552
type=NETFILTER_CFG msg=audit(1748529508.268:2283): table=nat family=2 entries=10 op=xt_replace pid=21816 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.268:2283): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556407992500 items=0 ppid=21731 pid=21816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.268:2283): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38
type=NETFILTER_CFG msg=audit(1748529508.270:2284): table=filter family=2 entries=18 op=xt_replace pid=21818 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.270:2284): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55aeb2a3e050 items=0 ppid=21731 pid=21818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.270:2284): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552
type=NETFILTER_CFG msg=audit(1748529508.278:2285): table=filter family=2 entries=19 op=xt_replace pid=21821 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.278:2285): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b4374091d0 items=0 ppid=21731 pid=21821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.278:2285): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054
type=NETFILTER_CFG msg=audit(1748529508.280:2286): table=filter family=2 entries=20 op=xt_replace pid=21823 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.280:2286): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ad4ab414f0 items=0 ppid=21731 pid=21823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.280:2286): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31
type=NETFILTER_CFG msg=audit(1748529508.282:2287): table=filter family=2 entries=21 op=xt_replace pid=21825 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.282:2287): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55973d999670 items=0 ppid=21731 pid=21825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.282:2287): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32
type=NETFILTER_CFG msg=audit(1748529508.284:2288): table=filter family=2 entries=22 op=xt_replace pid=21827 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.284:2288): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555ae02877c0 items=0 ppid=21731 pid=21827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.284:2288): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1748529508.298:2289): table=filter family=2 entries=23 op=xt_replace pid=21831 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.298:2289): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5615d3a899f0 items=0 ppid=21731 pid=21831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.298:2289): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552
type=NETFILTER_CFG msg=audit(1748529508.299:2290): table=filter family=2 entries=22 op=xt_replace pid=21832 subj=system_u:system_r:iptables_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529508.299:2290): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5583167cf7d0 items=0 ppid=21731 pid=21832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529508.299:2290): proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552
type=SERVICE_START msg=audit(1748529508.306:2291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529508.358:2292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529508.378:2293): pid=21688 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529508.378:2294): pid=21688 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529508.381:2295): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529508.381:2296): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529508.391:2297): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529508.391:2298): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529508.392:2299): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529508.410:2300): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529508.410:2301): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529508.686:2302): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529508.686:2303): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529508.687:2304): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21892 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529508.703:2305): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529508.703:2306): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529508.712:2307): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529508.712:2308): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529508.713:2309): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529508.732:2310): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529508.732:2311): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529508.746:2312): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529508.747:2313): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529508.747:2314): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529508.784:2315): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529508.784:2316): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529508.794:2317): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529508.794:2318): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529508.795:2319): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529508.812:2320): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529508.812:2321): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529508.822:2322): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529508.822:2323): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529508.823:2324): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529508.874:2325): pid=21971 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529508.874:2326): pid=21971 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706B65626D697975696C6C68666D68627166616E616B7767626867696C677771203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393530382E3730363037332D32313839302D32383730323434303336383934312F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529508.875:2327): pid=21971 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529508.878:2328): pid=21971 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529509.171:2329): pid=21971 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529509.171:2330): pid=21971 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529509.174:2331): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529509.174:2332): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529509.184:2333): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529509.184:2334): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529509.185:2335): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=21977 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529509.202:2336): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529509.202:2337): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529516.088:2338): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529516.088:2339): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529516.089:2340): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529516.106:2341): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529516.106:2342): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529516.116:2343): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529516.116:2344): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529516.117:2345): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22218 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529516.136:2346): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529516.136:2347): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529516.391:2348): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529516.391:2349): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529516.392:2350): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22238 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529516.409:2351): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529516.409:2352): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529516.419:2353): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529516.419:2354): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529516.419:2355): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529516.463:2356): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529516.463:2357): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529516.478:2358): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529516.478:2359): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529516.479:2360): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22270 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529516.515:2361): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529516.515:2362): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529516.524:2363): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529516.524:2364): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529516.525:2365): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22284 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529516.543:2366): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529516.543:2367): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529516.552:2368): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529516.552:2369): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529516.553:2370): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22299 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529516.602:2371): pid=22314 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529516.602:2372): pid=22314 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F726D796C6675676A6768616874666D62677A61726B61676476756B6C6F616E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393531362E313038393836362D32323230322D3134303736393737333139353432382F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529516.602:2373): pid=22314 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529516.604:2374): pid=22314 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529517.170:2375): pid=22314 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529517.170:2376): pid=22314 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529517.173:2377): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529517.173:2378): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529517.186:2379): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529517.186:2380): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529517.187:2381): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22351 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529517.204:2382): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529517.204:2383): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1748529518.337:2384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1748529518.456:2385): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529518.456:2386): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529518.457:2387): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22386 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529518.474:2388): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529518.474:2389): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529518.483:2390): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529518.483:2391): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529518.483:2392): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22400 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529518.504:2393): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529518.504:2394): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529518.609:2395): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529518.609:2396): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529518.610:2397): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22421 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529518.636:2398): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529518.636:2399): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529518.646:2400): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529518.646:2401): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529518.647:2402): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529518.665:2403): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529518.665:2404): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529518.675:2405): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529518.675:2406): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529518.675:2407): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22450 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529518.724:2408): pid=22465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529518.724:2409): pid=22465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A766562726669616165686C76626C737A616363617974626362746B706D6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393531382E343737303334382D32323338342D32333033393233373538313532382F416E736962616C6C5A5F79756D5F7265706F7369746F72792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529518.725:2410): pid=22465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529518.726:2411): pid=22465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529518.885:2412): pid=22465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529518.885:2413): pid=22465 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529518.888:2414): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529518.888:2415): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529518.897:2416): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529518.897:2417): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529518.898:2418): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529518.916:2419): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529518.916:2420): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529519.145:2421): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529519.145:2422): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529519.146:2423): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22488 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529519.162:2424): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529519.162:2425): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529519.171:2426): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529519.171:2427): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529519.172:2428): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22502 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529519.192:2429): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529519.192:2430): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529519.296:2431): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529519.296:2432): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529519.297:2433): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22523 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529519.323:2434): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529519.323:2435): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529519.333:2436): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529519.333:2437): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529519.333:2438): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22537 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529519.350:2439): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529519.350:2440): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529519.360:2441): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529519.360:2442): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529519.360:2443): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22552 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529519.410:2444): pid=22567 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529519.410:2445): pid=22567 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6271617872747874756873656E78686468686E786F707372746373677A706F68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393531392E313635313036382D32323438362D3138353039333537333636393132312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529519.411:2446): pid=22567 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529519.412:2447): pid=22567 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529519.919:2448): pid=22567 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529519.920:2449): pid=22567 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529519.922:2450): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529519.922:2451): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529519.933:2452): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529519.933:2453): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529519.934:2454): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529519.952:2455): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529519.952:2456): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529520.156:2457): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529520.156:2458): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529520.157:2459): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529520.173:2460): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529520.173:2461): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529520.182:2462): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529520.182:2463): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529520.183:2464): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529520.202:2465): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529520.202:2466): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529520.309:2467): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529520.309:2468): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529520.310:2469): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22627 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529520.338:2470): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529520.338:2471): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529520.348:2472): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529520.348:2473): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529520.349:2474): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22641 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529520.366:2475): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529520.366:2476): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529520.377:2477): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529520.377:2478): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529520.378:2479): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22656 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529520.427:2480): pid=22671 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529520.427:2481): pid=22671 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A6471616E766367616E676D736A626D6C69757A776B656676686969726A72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393532302E313736303431312D32323539302D3233353830373332393630373839342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529520.428:2482): pid=22671 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529520.429:2483): pid=22671 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529520.581:2484): pid=22671 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529520.582:2485): pid=22671 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529520.584:2486): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529520.584:2487): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529520.594:2488): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529520.594:2489): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529520.594:2490): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22675 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529520.611:2491): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529520.611:2492): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529520.820:2493): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529520.820:2494): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529520.821:2495): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22694 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529520.838:2496): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529520.838:2497): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529520.847:2498): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529520.847:2499): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529520.848:2500): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22708 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529520.867:2501): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529520.867:2502): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529521.050:2503): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529521.050:2504): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529521.051:2505): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22729 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529521.081:2506): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529521.081:2507): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529521.091:2508): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529521.091:2509): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529521.092:2510): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22743 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529521.110:2511): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529521.110:2512): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529521.121:2513): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529521.121:2514): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529521.122:2515): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22758 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529521.171:2516): pid=22773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529521.171:2517): pid=22773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65636A676E6E6F69687665636E616D6C7262687073657A6E67707A6367786870203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393532302E3834313230382D32323639322D3137353935353530333133333633322F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529521.171:2518): pid=22773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529521.173:2519): pid=22773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529523.507:2520): pid=22775 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubectl-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529523.779:2521): pid=22773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529523.779:2522): pid=22773 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529523.782:2523): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529523.782:2524): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529523.792:2525): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529523.792:2526): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529523.793:2527): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22779 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529523.811:2528): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529523.811:2529): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529523.907:2530): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529523.907:2531): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529523.908:2532): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22795 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529523.925:2533): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529523.925:2534): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529523.934:2535): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529523.934:2536): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529523.935:2537): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22809 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529523.955:2538): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529523.955:2539): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529523.969:2540): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529523.969:2541): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529523.970:2542): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22830 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529524.000:2543): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529524.000:2544): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529524.010:2545): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529524.010:2546): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529524.011:2547): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529524.028:2548): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529524.028:2549): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529524.038:2550): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529524.038:2551): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529524.039:2552): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=22859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529524.092:2553): pid=22874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529524.092:2554): pid=22874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61746864666E756774786C6E7A70626468657671686E6978776D77776165676E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393532332E393238313435322D32323639322D3231353730303639303435333236302F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529524.093:2555): pid=22874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529524.094:2556): pid=22874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1748529530.838:2557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd93bb30f3c7c44e6bbff9dd3baf376ca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529531.008:2558): prog-id=148 op=LOAD
type=BPF msg=audit(1748529531.008:2559): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529531.009:2560): prog-id=149 op=LOAD
type=BPF msg=audit(1748529531.009:2561): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529531.009:2562): prog-id=150 op=LOAD
type=BPF msg=audit(1748529531.009:2563): prog-id=151 op=LOAD
type=BPF msg=audit(1748529531.009:2564): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529531.009:2565): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529531.010:2566): prog-id=152 op=LOAD
type=BPF msg=audit(1748529531.010:2567): prog-id=153 op=LOAD
type=BPF msg=audit(1748529531.010:2568): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529531.010:2569): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529531.012:2570): prog-id=154 op=LOAD
type=BPF msg=audit(1748529531.012:2571): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529531.012:2572): prog-id=155 op=LOAD
type=BPF msg=audit(1748529531.012:2573): prog-id=156 op=LOAD
type=BPF msg=audit(1748529531.012:2574): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529531.012:2575): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529531.013:2576): prog-id=157 op=LOAD
type=BPF msg=audit(1748529531.013:2577): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1748529531.031:2578): pid=22876 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="socat-1.7.4.1-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529531.031:2579): pid=22876 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_queue-1.0.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529531.031:2580): pid=22876 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cttimeout-1.0.0-19.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529531.031:2581): pid=22876 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnetfilter_cthelper-1.0.0-22.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529531.031:2582): pid=22876 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conntrack-tools-1.4.7-4.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529531.031:2583): pid=22876 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.6-4.el9_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529531.031:2584): pid=22876 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.10-11.el9_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529531.031:2585): pid=22876 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubernetes-cni-1.2.0-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529531.031:2586): pid=22876 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubelet-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748529531.596:2587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529531.596:2588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529531.598:2589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd93bb30f3c7c44e6bbff9dd3baf376ca comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529531.760:2590): pid=22874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529531.760:2591): pid=22874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529531.762:2592): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529531.762:2593): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529531.772:2594): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529531.773:2595): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529531.773:2596): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23173 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529531.791:2597): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529531.791:2598): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529531.877:2599): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529531.877:2600): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529531.878:2601): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529531.896:2602): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529531.896:2603): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529531.905:2604): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529531.905:2605): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529531.906:2606): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529531.925:2607): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529531.925:2608): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529531.942:2609): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529531.942:2610): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529531.943:2611): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529531.972:2612): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529531.972:2613): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529531.982:2614): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529531.982:2615): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529531.983:2616): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529532.001:2617): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529532.001:2618): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529532.011:2619): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529532.011:2620): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529532.012:2621): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23252 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529532.062:2622): pid=23267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529532.062:2623): pid=23267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767166716663627A766F79737175716B6164727764637A686179776E71687177203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393533312E383938383536342D32323639322D37383235323636333638383433392F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529532.063:2624): pid=23267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529532.065:2625): pid=23267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748529535.911:2626): prog-id=158 op=LOAD
type=BPF msg=audit(1748529535.911:2627): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529535.912:2628): prog-id=159 op=LOAD
type=BPF msg=audit(1748529535.912:2629): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529535.912:2630): prog-id=160 op=LOAD
type=BPF msg=audit(1748529535.912:2631): prog-id=161 op=LOAD
type=BPF msg=audit(1748529535.912:2632): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529535.912:2633): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529535.913:2634): prog-id=162 op=LOAD
type=BPF msg=audit(1748529535.913:2635): prog-id=163 op=LOAD
type=BPF msg=audit(1748529535.913:2636): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529535.913:2637): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529535.915:2638): prog-id=164 op=LOAD
type=BPF msg=audit(1748529535.915:2639): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529535.915:2640): prog-id=165 op=LOAD
type=BPF msg=audit(1748529535.915:2641): prog-id=166 op=LOAD
type=BPF msg=audit(1748529535.915:2642): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529535.915:2643): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529535.916:2644): prog-id=167 op=LOAD
type=BPF msg=audit(1748529535.916:2645): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1748529535.930:2646): pid=23269 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cri-tools-1.26.0-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=SOFTWARE_UPDATE msg=audit(1748529535.930:2647): pid=23269 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="kubeadm-1.24.17-0.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3.9" exe="/usr/bin/python3.9" hostname=cn-jenkins-deploy-platform-ansible-k8s-370-1.novalocal addr=? terminal=pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529536.282:2648): pid=23267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529536.282:2649): pid=23267 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529536.285:2650): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529536.285:2651): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529536.294:2652): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529536.294:2653): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529536.295:2654): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529536.313:2655): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529536.313:2656): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529536.488:2657): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529536.488:2658): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529536.489:2659): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23316 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529536.506:2660): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529536.506:2661): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529536.514:2662): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529536.514:2663): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529536.515:2664): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23330 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529536.535:2665): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529536.535:2666): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529536.549:2667): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529536.549:2668): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529536.550:2669): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23351 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529536.576:2670): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529536.576:2671): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529536.586:2672): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529536.586:2673): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529536.587:2674): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529536.605:2675): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529536.605:2676): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529536.614:2677): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529536.614:2678): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529536.615:2679): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23380 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529536.664:2680): pid=23395 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529536.664:2681): pid=23395 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697172766A6D706C686B6D647961776A6E6E616D717261676576647A7770677A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393533362E35303836392D32333331342D3236363438333731333431313336312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529536.664:2682): pid=23395 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529536.666:2683): pid=23395 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748529536.880:2684): pid=23407 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_CMD msg=audit(1748529536.881:2685): pid=23407 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=6D7620636F6E6669672E746F6D6C202F6574632F636F6E7461696E6572642F636F6E6669672E746F6D6C exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="root" AUID="rocky"
type=CRED_REFR msg=audit(1748529536.881:2686): pid=23407 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529536.883:2687): pid=23407 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529536.885:2688): pid=23407 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529536.885:2689): pid=23407 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_ACCT msg=audit(1748529536.921:2690): pid=23398 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_CMD msg=audit(1748529536.921:2691): pid=23398 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C207265737461727420636F6E7461696E657264 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="root" AUID="rocky"
type=CRED_REFR msg=audit(1748529536.921:2692): pid=23398 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748529536.923:2693): pid=23398 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=SERVICE_STOP msg=audit(1748529536.934:2694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529536.999:2695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=containerd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529537.002:2696): pid=23398 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529537.002:2697): pid=23398 uid=0 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748529537.020:2698): pid=23395 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529537.020:2699): pid=23395 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529537.023:2700): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529537.023:2701): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529537.036:2702): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529537.036:2703): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529537.036:2704): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23426 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529537.057:2705): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529537.057:2706): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529537.317:2707): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529537.317:2708): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529537.318:2709): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23445 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529537.335:2710): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529537.335:2711): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529537.344:2712): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529537.344:2713): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529537.345:2714): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23459 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529537.364:2715): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529537.365:2716): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529537.379:2717): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529537.379:2718): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529537.380:2719): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529537.406:2720): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529537.406:2721): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529537.417:2722): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529537.417:2723): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529537.418:2724): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529537.434:2725): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529537.434:2726): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529537.444:2727): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529537.444:2728): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529537.445:2729): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23509 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529537.493:2730): pid=23524 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529537.493:2731): pid=23524 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7469747867786263766F77686E7873756D707467736A7070696E637076616B6E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393533372E333338303332352D32333434332D3139373036373530343739393538302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529537.494:2732): pid=23524 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529537.496:2733): pid=23524 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529537.692:2734): pid=23524 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529537.692:2735): pid=23524 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529537.694:2736): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529537.694:2737): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529537.706:2738): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529537.706:2739): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529537.707:2740): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23534 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529537.724:2741): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529537.724:2742): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529538.472:2743): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529538.472:2744): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529538.473:2745): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23559 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529538.490:2746): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529538.490:2747): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529538.499:2748): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529538.499:2749): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529538.499:2750): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529538.519:2751): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529538.519:2752): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529538.532:2753): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529538.532:2754): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529538.533:2755): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23594 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529538.561:2756): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529538.561:2757): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529538.574:2758): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529538.574:2759): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529538.575:2760): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23608 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529538.593:2761): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529538.593:2762): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529538.602:2763): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529538.602:2764): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529538.603:2765): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23623 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529538.656:2766): pid=23638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529538.656:2767): pid=23638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A7267706E687171786B617A6B73786966646275697076706F72756E686677203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393533382E343933303338322D32333535372D3230383331373830393835343631342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529538.656:2768): pid=23638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529538.658:2769): pid=23638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529538.860:2770): pid=23638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529538.860:2771): pid=23638 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529538.862:2772): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529538.862:2773): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529538.872:2774): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529538.872:2775): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529538.873:2776): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23676 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529538.890:2777): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529538.890:2778): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529539.354:2779): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529539.354:2780): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529539.354:2781): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23695 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529539.370:2782): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529539.371:2783): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529539.380:2784): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529539.380:2785): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529539.380:2786): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529539.400:2787): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529539.400:2788): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529539.507:2789): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529539.507:2790): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529539.508:2791): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23730 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529539.534:2792): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529539.534:2793): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529539.544:2794): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529539.544:2795): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529539.544:2796): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23744 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529539.562:2797): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529539.562:2798): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529539.572:2799): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529539.572:2800): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529539.573:2801): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23759 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529539.622:2802): pid=23774 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529539.622:2803): pid=23774 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70656E6E7168766479646973796D6474616D78636F7163787679647971736971203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393533392E333733363930312D32333639332D3232323832323137363537333131382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529539.623:2804): pid=23774 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529539.624:2805): pid=23774 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529539.769:2806): pid=23774 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529539.770:2807): pid=23774 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529539.772:2808): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529539.772:2809): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529539.782:2810): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529539.782:2811): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529539.782:2812): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529539.799:2813): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529539.800:2814): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529540.033:2815): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529540.033:2816): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529540.034:2817): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23795 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529540.051:2818): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529540.051:2819): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529540.061:2820): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529540.061:2821): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529540.062:2822): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23809 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529540.083:2823): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529540.083:2824): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529540.096:2825): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529540.096:2826): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529540.097:2827): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23830 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529540.124:2828): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529540.124:2829): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529540.134:2830): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529540.134:2831): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529540.135:2832): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529540.153:2833): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529540.153:2834): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529540.163:2835): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529540.163:2836): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529540.164:2837): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529540.218:2838): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529540.218:2839): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6365627879667278686279777A6D75796C657365646871776862726866757573203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393534302E303534373230342D32333739332D3135343731303933353836343430302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529540.218:2840): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529540.220:2841): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529540.388:2842): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529540.388:2843): pid=23874 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529540.391:2844): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529540.391:2845): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529540.400:2846): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529540.400:2847): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529540.401:2848): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23880 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529540.419:2849): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529540.419:2850): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.011:2851): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.011:2852): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.012:2853): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.029:2854): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.029:2855): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.038:2856): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.038:2857): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.039:2858): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23917 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.060:2859): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.060:2860): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.073:2861): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.073:2862): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.074:2863): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.101:2864): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.101:2865): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.111:2866): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.111:2867): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.112:2868): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23952 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.129:2869): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.129:2870): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.139:2871): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.139:2872): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.139:2873): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23967 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529541.188:2874): pid=23982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529541.188:2875): pid=23982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F646F7677677672616E736764616361717663676462797275737A62616366203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393534312E303332303931312D32333930312D3233333134323633373534313531342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529541.189:2876): pid=23982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529541.190:2877): pid=23982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529541.353:2878): pid=23982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529541.354:2879): pid=23982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529541.356:2880): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.356:2881): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.365:2882): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.365:2883): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.366:2884): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=23986 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.383:2885): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.383:2886): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.615:2887): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.615:2888): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.616:2889): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24003 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.632:2890): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.632:2891): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.641:2892): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.641:2893): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.642:2894): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24017 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.664:2895): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.664:2896): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.678:2897): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.678:2898): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.678:2899): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24038 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.705:2900): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.705:2901): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.717:2902): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.717:2903): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.718:2904): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24052 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.735:2905): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.735:2906): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.744:2907): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.744:2908): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.745:2909): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24067 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529541.795:2910): pid=24082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529541.795:2911): pid=24082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6266706A626669626D6C616F637173626D6F72646D696A6B746D6F78726A7065203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393534312E363335303639312D32343030312D3136333732383038323630393736322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529541.796:2912): pid=24082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529541.797:2913): pid=24082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529541.954:2914): pid=24082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529541.954:2915): pid=24082 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529541.956:2916): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.956:2917): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529541.965:2918): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529541.965:2919): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529541.966:2920): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24086 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529541.983:2921): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529541.983:2922): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529542.217:2923): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529542.217:2924): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529542.218:2925): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24103 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529542.235:2926): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529542.235:2927): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529542.244:2928): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529542.244:2929): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529542.245:2930): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24117 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529542.265:2931): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529542.265:2932): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529542.528:2933): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529542.528:2934): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529542.529:2935): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24138 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529542.565:2936): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529542.565:2937): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529542.575:2938): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529542.575:2939): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529542.576:2940): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24152 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529542.595:2941): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529542.595:2942): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529542.605:2943): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529542.605:2944): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529542.606:2945): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24167 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529542.659:2946): pid=24182 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529542.659:2947): pid=24182 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6262616B79636379716A6D616F68736E656E776862767666637869657379626D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393534322E323337393333362D32343130312D3139303835353231363639393838322F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529542.660:2948): pid=24182 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529542.661:2949): pid=24182 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748529543.091:2950): prog-id=168 op=LOAD
type=BPF msg=audit(1748529543.091:2951): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.093:2952): prog-id=169 op=LOAD
type=BPF msg=audit(1748529543.093:2953): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.093:2954): prog-id=170 op=LOAD
type=BPF msg=audit(1748529543.093:2955): prog-id=171 op=LOAD
type=BPF msg=audit(1748529543.093:2956): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.093:2957): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.094:2958): prog-id=172 op=LOAD
type=BPF msg=audit(1748529543.094:2959): prog-id=173 op=LOAD
type=BPF msg=audit(1748529543.094:2960): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.094:2961): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.096:2962): prog-id=174 op=LOAD
type=BPF msg=audit(1748529543.096:2963): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.097:2964): prog-id=175 op=LOAD
type=BPF msg=audit(1748529543.097:2965): prog-id=176 op=LOAD
type=BPF msg=audit(1748529543.097:2966): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.097:2967): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.098:2968): prog-id=177 op=LOAD
type=BPF msg=audit(1748529543.098:2969): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.273:2970): prog-id=178 op=LOAD
type=BPF msg=audit(1748529543.273:2971): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.275:2972): prog-id=179 op=LOAD
type=BPF msg=audit(1748529543.275:2973): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.275:2974): prog-id=180 op=LOAD
type=BPF msg=audit(1748529543.275:2975): prog-id=181 op=LOAD
type=BPF msg=audit(1748529543.275:2976): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.275:2977): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.276:2978): prog-id=182 op=LOAD
type=BPF msg=audit(1748529543.276:2979): prog-id=183 op=LOAD
type=BPF msg=audit(1748529543.276:2980): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.276:2981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.278:2982): prog-id=184 op=LOAD
type=BPF msg=audit(1748529543.278:2983): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.278:2984): prog-id=185 op=LOAD
type=BPF msg=audit(1748529543.278:2985): prog-id=186 op=LOAD
type=BPF msg=audit(1748529543.278:2986): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.278:2987): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529543.279:2988): prog-id=187 op=LOAD
type=BPF msg=audit(1748529543.279:2989): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1748529543.293:2990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529543.313:2991): pid=24182 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529543.314:2992): pid=24182 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529543.316:2993): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529543.316:2994): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529543.328:2995): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529543.328:2996): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529543.329:2997): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24241 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529543.348:2998): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529543.348:2999): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=SERVICE_STOP msg=audit(1748529543.351:3000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1748529543.567:3001): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529543.567:3002): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529543.568:3003): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24258 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529543.584:3004): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529543.584:3005): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529543.593:3006): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529543.593:3007): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529543.594:3008): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529543.613:3009): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529543.613:3010): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529543.626:3011): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529543.626:3012): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529543.627:3013): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24293 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529543.653:3014): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529543.653:3015): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529543.662:3016): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529543.662:3017): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529543.663:3018): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529543.681:3019): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529543.681:3020): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529543.690:3021): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529543.690:3022): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529543.691:3023): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=24322 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529543.740:3024): pid=24337 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529543.741:3025): pid=24337 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66656F7674737369657A7463776B6E71776570757262726C75707A63776B6262203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393534332E353837303838362D32343235362D3234393534343930333334323534352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529543.741:3026): pid=24337 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529543.743:3027): pid=24337 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SERVICE_START msg=audit(1748529553.532:3028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529553.532:3029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529553.544:3030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529553.602:3031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529563.781:3032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529563.781:3033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529563.801:3034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529563.858:3035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529574.031:3036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529574.031:3037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529574.038:3038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529574.099:3039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529576.815:3040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529576.815:3041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748529577.016:3042): prog-id=188 op=LOAD
type=BPF msg=audit(1748529577.016:3043): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529577.017:3044): prog-id=189 op=LOAD
type=BPF msg=audit(1748529577.017:3045): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529577.017:3046): prog-id=190 op=LOAD
type=BPF msg=audit(1748529577.017:3047): prog-id=191 op=LOAD
type=BPF msg=audit(1748529577.017:3048): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529577.017:3049): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529577.018:3050): prog-id=192 op=LOAD
type=BPF msg=audit(1748529577.018:3051): prog-id=193 op=LOAD
type=BPF msg=audit(1748529577.018:3052): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529577.018:3053): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529577.020:3054): prog-id=194 op=LOAD
type=BPF msg=audit(1748529577.020:3055): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529577.020:3056): prog-id=195 op=LOAD
type=BPF msg=audit(1748529577.020:3057): prog-id=196 op=LOAD
type=BPF msg=audit(1748529577.020:3058): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529577.020:3059): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529577.020:3060): prog-id=197 op=LOAD
type=BPF msg=audit(1748529577.020:3061): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1748529577.041:3062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1748529577.386:3063): table=nat family=2 entries=11 op=xt_replace pid=24622 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.386:3063): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a69643d320 items=0 ppid=24608 pid=24622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.386:3063): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174
type=NETFILTER_CFG msg=audit(1748529577.397:3064): table=nat family=2 entries=13 op=xt_replace pid=24625 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.397:3064): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55694d24a160 items=0 ppid=24608 pid=24625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.397:3064): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030
type=NETFILTER_CFG msg=audit(1748529577.398:3065): table=filter family=2 entries=23 op=xt_replace pid=24626 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.398:3065): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c38f35f290 items=0 ppid=24608 pid=24626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.398:3065): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529577.407:3066): table=filter family=2 entries=25 op=xt_replace pid=24634 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.407:3066): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d213d2c1d0 items=0 ppid=24608 pid=24634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.407:3066): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B
type=NETFILTER_CFG msg=audit(1748529577.410:3067): table=filter family=2 entries=26 op=xt_replace pid=24636 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.410:3067): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55eedc495950 items=0 ppid=24608 pid=24636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.410:3067): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38
type=NETFILTER_CFG msg=audit(1748529577.412:3068): table=filter family=2 entries=27 op=xt_replace pid=24638 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.412:3068): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560dc8a80490 items=0 ppid=24608 pid=24638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.412:3068): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1748529577.415:3069): table=filter family=2 entries=28 op=xt_replace pid=24640 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.415:3069): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b345e9a600 items=0 ppid=24608 pid=24640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.415:3069): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1748529577.416:3070): table=nat family=2 entries=14 op=xt_replace pid=24641 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.416:3070): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56431273b670 items=0 ppid=24608 pid=24641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.416:3070): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174
type=NETFILTER_CFG msg=audit(1748529577.419:3071): table=nat family=2 entries=16 op=xt_replace pid=24643 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.419:3071): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56139b96d840 items=0 ppid=24608 pid=24643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.419:3071): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174
type=NETFILTER_CFG msg=audit(1748529577.421:3072): table=nat family=2 entries=18 op=xt_replace pid=24645 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.421:3072): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55e40a6b8690 items=0 ppid=24608 pid=24645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.421:3072): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1748529577.423:3073): table=nat family=2 entries=19 op=xt_replace pid=24647 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.423:3073): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c1cb7fe1e0 items=0 ppid=24608 pid=24647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.423:3073): proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47
type=NETFILTER_CFG msg=audit(1748529577.426:3074): table=nat family=2 entries=20 op=xt_replace pid=24649 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.426:3074): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558eba7022b0 items=0 ppid=24608 pid=24649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.426:3074): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1748529577.428:3075): table=nat family=2 entries=21 op=xt_replace pid=24651 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.428:3075): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562e19972d90 items=0 ppid=24608 pid=24651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.428:3075): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1748529577.430:3076): table=nat family=2 entries=22 op=xt_replace pid=24653 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.430:3076): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56175514e9a0 items=0 ppid=24608 pid=24653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.430:3076): proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445
type=NETFILTER_CFG msg=audit(1748529577.436:3077): table=mangle family=2 entries=0 op=xt_register pid=24655 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1748529577.436:3077): arch=c000003e syscall=175 success=yes exit=0 a0=55fc6a840490 a1=e97e a2=55fc68dbe962 a3=5 items=0 ppid=37 pid=24655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.436:3077): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65
type=NETFILTER_CFG msg=audit(1748529577.437:3078): table=mangle family=2 entries=6 op=xt_replace pid=24654 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.437:3078): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5633d01a8bc0 items=0 ppid=24608 pid=24654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.437:3078): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1748529577.453:3079): table=nat family=10 entries=0 op=xt_register pid=24659 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1748529577.453:3079): arch=c000003e syscall=175 success=yes exit=0 a0=56266cc2e490 a1=f25e a2=56266ad16962 a3=5 items=0 ppid=37 pid=24659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.453:3079): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6E6174
type=NETFILTER_CFG msg=audit(1748529577.454:3080): table=nat family=10 entries=5 op=xt_replace pid=24656 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.454:3080): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=559cd9925bf0 items=0 ppid=24608 pid=24656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.454:3080): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174
type=NETFILTER_CFG msg=audit(1748529577.455:3081): table=mangle family=2 entries=8 op=xt_replace pid=24657 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.455:3081): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ca7da14d90 items=0 ppid=24608 pid=24657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.455:3081): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1748529577.457:3082): table=nat family=2 entries=23 op=xt_replace pid=24661 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.457:3082): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55776b5c8670 items=0 ppid=24608 pid=24661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.457:3082): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1748529577.457:3083): table=nat family=10 entries=7 op=xt_replace pid=24662 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.457:3083): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563e68a08ac0 items=0 ppid=24608 pid=24662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.457:3083): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030
type=NETFILTER_CFG msg=audit(1748529577.458:3084): table=filter family=2 entries=29 op=xt_replace pid=24665 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1748529577.458:3084): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5628631070c0 items=0 ppid=24608 pid=24665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.458:3084): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529577.463:3085): table=filter family=10 entries=0 op=xt_register pid=24667 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1748529577.463:3085): arch=c000003e syscall=175 success=yes exit=0 a0=5635f32ef490 a1=ed6e a2=5635f2380962 a3=5 items=0 ppid=37 pid=24667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.463:3085): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F66696C746572
type=NETFILTER_CFG msg=audit(1748529577.464:3086): table=filter family=10 entries=4 op=xt_replace pid=24666 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.464:3086): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5618f72f8a90 items=0 ppid=24608 pid=24666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.464:3086): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529577.466:3087): table=filter family=10 entries=6 op=xt_replace pid=24669 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.466:3087): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557ace4eead0 items=0 ppid=24608 pid=24669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.466:3087): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B
type=NETFILTER_CFG msg=audit(1748529577.468:3088): table=filter family=10 entries=7 op=xt_replace pid=24671 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.468:3088): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5558e5e62860 items=0 ppid=24608 pid=24671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.468:3088): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1748529577.470:3089): table=filter family=10 entries=8 op=xt_replace pid=24673 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.470:3089): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c6c20a0a50 items=0 ppid=24608 pid=24673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.470:3089): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C
type=NETFILTER_CFG msg=audit(1748529577.471:3090): table=nat family=10 entries=8 op=xt_replace pid=24674 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.471:3090): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5631403b5020 items=0 ppid=24608 pid=24674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.471:3090): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174
type=NETFILTER_CFG msg=audit(1748529577.472:3091): table=nat family=10 entries=10 op=xt_replace pid=24675 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.472:3091): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556d5f254270 items=0 ppid=24608 pid=24675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.472:3091): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174
type=NETFILTER_CFG msg=audit(1748529577.474:3092): table=nat family=10 entries=12 op=xt_replace pid=24677 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.474:3092): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5651956e3140 items=0 ppid=24608 pid=24677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.474:3092): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1748529577.476:3093): table=nat family=10 entries=13 op=xt_replace pid=24679 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.476:3093): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5555ff482d50 items=0 ppid=24608 pid=24679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.476:3093): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47
type=NETFILTER_CFG msg=audit(1748529577.478:3094): table=nat family=10 entries=14 op=xt_replace pid=24681 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.478:3094): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=561ebcbbee90 items=0 ppid=24608 pid=24681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.478:3094): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E
type=NETFILTER_CFG msg=audit(1748529577.480:3095): table=nat family=10 entries=15 op=xt_replace pid=24683 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.480:3095): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=562bbcbfd9b0 items=0 ppid=24608 pid=24683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.480:3095): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030
type=NETFILTER_CFG msg=audit(1748529577.482:3096): table=nat family=10 entries=16 op=xt_replace pid=24685 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.482:3096): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564f41a356c0 items=0 ppid=24608 pid=24685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.482:3096): proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445
type=NETFILTER_CFG msg=audit(1748529577.487:3097): table=mangle family=10 entries=0 op=xt_register pid=24687 subj=system_u:system_r:kmod_t:s0 comm="modprobe"
type=SYSCALL msg=audit(1748529577.487:3097): arch=c000003e syscall=175 success=yes exit=0 a0=56291f8ff490 a1=ebd6 a2=56291f5d2962 a3=5 items=0 ppid=37 pid=24687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kmod_t:s0 key=(null)ARCH=x86_64 SYSCALL=init_module AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.487:3097): proctitle=2F7573722F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6D616E676C65
type=NETFILTER_CFG msg=audit(1748529577.489:3098): table=mangle family=10 entries=6 op=xt_replace pid=24686 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.489:3098): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a9c1a57d50 items=0 ppid=24608 pid=24686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.489:3098): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1748529577.490:3099): table=mangle family=10 entries=8 op=xt_replace pid=24688 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.490:3099): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5648b0d8df90 items=0 ppid=24608 pid=24688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.490:3099): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1748529577.491:3100): table=nat family=10 entries=17 op=xt_replace pid=24689 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.491:3100): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55acc2d71380 items=0 ppid=24608 pid=24689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.491:3100): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1748529577.492:3101): table=filter family=10 entries=9 op=xt_replace pid=24690 subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 comm="ip6tables"
type=SYSCALL msg=audit(1748529577.492:3101): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55aa4da7f540 items=0 ppid=24608 pid=24690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529577.492:3101): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572
type=BPF msg=audit(1748529579.742:3102): prog-id=198 op=LOAD
type=BPF msg=audit(1748529579.743:3103): prog-id=199 op=LOAD
type=SYSCALL msg=audit(1748529579.743:3103): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=24709 pid=24730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.743:3103): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463306362353934373337636464306463306131646538643834353438
type=BPF msg=audit(1748529579.744:3104): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.744:3105): prog-id=200 op=LOAD
type=SYSCALL msg=audit(1748529579.744:3105): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=24709 pid=24730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.744:3105): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463306362353934373337636464306463306131646538643834353438
type=BPF msg=audit(1748529579.744:3106): prog-id=201 op=LOAD
type=SYSCALL msg=audit(1748529579.744:3106): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=24709 pid=24730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=BPF msg=audit(1748529579.744:3107): prog-id=202 op=LOAD
type=PROCTITLE msg=audit(1748529579.744:3106): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463306362353934373337636464306463306131646538643834353438
type=BPF msg=audit(1748529579.744:3108): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.744:3109): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.744:3110): prog-id=203 op=LOAD
type=SYSCALL msg=audit(1748529579.744:3110): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=24709 pid=24730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.744:3110): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463306362353934373337636464306463306131646538643834353438
type=BPF msg=audit(1748529579.745:3111): prog-id=204 op=LOAD
type=SYSCALL msg=audit(1748529579.745:3111): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=24718 pid=24745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.745:3111): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438353737393034306366633833356231363435666261346631616438
type=BPF msg=audit(1748529579.746:3112): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.746:3113): prog-id=205 op=LOAD
type=SYSCALL msg=audit(1748529579.746:3113): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=24718 pid=24745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.746:3113): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438353737393034306366633833356231363435666261346631616438
type=BPF msg=audit(1748529579.746:3114): prog-id=206 op=LOAD
type=SYSCALL msg=audit(1748529579.746:3114): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=24718 pid=24745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.746:3114): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438353737393034306366633833356231363435666261346631616438
type=BPF msg=audit(1748529579.746:3115): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.746:3116): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.746:3117): prog-id=207 op=LOAD
type=SYSCALL msg=audit(1748529579.746:3117): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=24718 pid=24745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.746:3117): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438353737393034306366633833356231363435666261346631616438
type=BPF msg=audit(1748529579.765:3118): prog-id=208 op=LOAD
type=BPF msg=audit(1748529579.765:3119): prog-id=209 op=LOAD
type=SYSCALL msg=audit(1748529579.765:3119): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=24753 pid=24790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.765:3119): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035643566386438383736623462316263616330656262636133383863
type=BPF msg=audit(1748529579.765:3120): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.765:3121): prog-id=210 op=LOAD
type=SYSCALL msg=audit(1748529579.765:3121): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=24753 pid=24790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.765:3121): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035643566386438383736623462316263616330656262636133383863
type=BPF msg=audit(1748529579.765:3122): prog-id=211 op=LOAD
type=SYSCALL msg=audit(1748529579.765:3122): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=24753 pid=24790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.765:3122): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035643566386438383736623462316263616330656262636133383863
type=BPF msg=audit(1748529579.765:3123): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.765:3124): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.765:3125): prog-id=212 op=LOAD
type=SYSCALL msg=audit(1748529579.765:3125): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=24753 pid=24790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.765:3125): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035643566386438383736623462316263616330656262636133383863
type=BPF msg=audit(1748529579.777:3126): prog-id=213 op=LOAD
type=BPF msg=audit(1748529579.777:3127): prog-id=214 op=LOAD
type=SYSCALL msg=audit(1748529579.777:3127): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=24782 pid=24821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.777:3127): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313038316332343263303437326532306230643933643364633432
type=BPF msg=audit(1748529579.777:3128): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.777:3129): prog-id=215 op=LOAD
type=SYSCALL msg=audit(1748529579.777:3129): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=24782 pid=24821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.777:3129): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313038316332343263303437326532306230643933643364633432
type=BPF msg=audit(1748529579.777:3130): prog-id=216 op=LOAD
type=SYSCALL msg=audit(1748529579.777:3130): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=24782 pid=24821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.777:3130): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313038316332343263303437326532306230643933643364633432
type=BPF msg=audit(1748529579.777:3131): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.777:3132): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.778:3133): prog-id=217 op=LOAD
type=SYSCALL msg=audit(1748529579.778:3133): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=24782 pid=24821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.778:3133): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331313038316332343263303437326532306230643933643364633432
type=BPF msg=audit(1748529579.910:3134): prog-id=218 op=LOAD
type=BPF msg=audit(1748529579.911:3135): prog-id=219 op=LOAD
type=SYSCALL msg=audit(1748529579.911:3135): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=24718 pid=24891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.911:3135): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664323232376234353230346137353861323761393233626666396163
type=BPF msg=audit(1748529579.911:3136): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.911:3137): prog-id=220 op=LOAD
type=SYSCALL msg=audit(1748529579.911:3137): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=24718 pid=24891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.911:3137): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664323232376234353230346137353861323761393233626666396163
type=BPF msg=audit(1748529579.911:3138): prog-id=221 op=LOAD
type=SYSCALL msg=audit(1748529579.911:3138): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=24718 pid=24891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.911:3138): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664323232376234353230346137353861323761393233626666396163
type=BPF msg=audit(1748529579.911:3139): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.911:3140): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.911:3141): prog-id=222 op=LOAD
type=SYSCALL msg=audit(1748529579.911:3141): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=24718 pid=24891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.911:3141): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664323232376234353230346137353861323761393233626666396163
type=BPF msg=audit(1748529579.912:3142): prog-id=223 op=LOAD
type=BPF msg=audit(1748529579.912:3143): prog-id=224 op=LOAD
type=SYSCALL msg=audit(1748529579.912:3143): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=24709 pid=24909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.912:3143): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464316362323435633965333463646132666562623239343637616138
type=BPF msg=audit(1748529579.912:3144): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.913:3145): prog-id=225 op=LOAD
type=SYSCALL msg=audit(1748529579.913:3145): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=24709 pid=24909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.913:3145): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464316362323435633965333463646132666562623239343637616138
type=BPF msg=audit(1748529579.913:3146): prog-id=226 op=LOAD
type=SYSCALL msg=audit(1748529579.913:3146): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=24709 pid=24909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.913:3146): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464316362323435633965333463646132666562623239343637616138
type=BPF msg=audit(1748529579.913:3147): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.913:3148): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.913:3149): prog-id=227 op=LOAD
type=SYSCALL msg=audit(1748529579.913:3149): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=24709 pid=24909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.913:3149): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464316362323435633965333463646132666562623239343637616138
type=BPF msg=audit(1748529579.937:3150): prog-id=228 op=LOAD
type=BPF msg=audit(1748529579.938:3151): prog-id=229 op=LOAD
type=SYSCALL msg=audit(1748529579.938:3151): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=24753 pid=24942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.938:3151): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663065363865356138346361663163616338333864346661663735
type=BPF msg=audit(1748529579.938:3152): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.938:3153): prog-id=230 op=LOAD
type=SYSCALL msg=audit(1748529579.938:3153): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=24753 pid=24942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.938:3153): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663065363865356138346361663163616338333864346661663735
type=BPF msg=audit(1748529579.938:3154): prog-id=231 op=LOAD
type=SYSCALL msg=audit(1748529579.938:3154): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=24753 pid=24942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.938:3154): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663065363865356138346361663163616338333864346661663735
type=BPF msg=audit(1748529579.938:3155): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.938:3156): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.938:3157): prog-id=232 op=LOAD
type=SYSCALL msg=audit(1748529579.938:3157): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=24753 pid=24942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.938:3157): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663065363865356138346361663163616338333864346661663735
type=BPF msg=audit(1748529579.941:3158): prog-id=233 op=LOAD
type=BPF msg=audit(1748529579.942:3159): prog-id=234 op=LOAD
type=SYSCALL msg=audit(1748529579.942:3159): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7ad0 a2=90 a3=0 items=0 ppid=24782 pid=24943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.942:3159): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643164646136383234656535616639383138336437653138623534
type=BPF msg=audit(1748529579.942:3160): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.942:3161): prog-id=235 op=LOAD
type=SYSCALL msg=audit(1748529579.942:3161): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7c48 a2=90 a3=0 items=0 ppid=24782 pid=24943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.942:3161): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643164646136383234656535616639383138336437653138623534
type=BPF msg=audit(1748529579.943:3162): prog-id=236 op=LOAD
type=SYSCALL msg=audit(1748529579.943:3162): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b79d8 a2=90 a3=0 items=0 ppid=24782 pid=24943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.943:3162): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643164646136383234656535616639383138336437653138623534
type=BPF msg=audit(1748529579.943:3163): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.943:3164): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529579.943:3165): prog-id=237 op=LOAD
type=SYSCALL msg=audit(1748529579.943:3165): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b7eb0 a2=90 a3=0 items=0 ppid=24782 pid=24943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529579.943:3165): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643164646136383234656535616639383138336437653138623534
type=BPF msg=audit(1748529585.304:3166): prog-id=238 op=LOAD
type=BPF msg=audit(1748529585.304:3167): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.304:3168): prog-id=239 op=LOAD
type=BPF msg=audit(1748529585.304:3169): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.305:3170): prog-id=240 op=LOAD
type=BPF msg=audit(1748529585.305:3171): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.306:3172): prog-id=241 op=LOAD
type=BPF msg=audit(1748529585.306:3173): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.307:3174): prog-id=242 op=LOAD
type=BPF msg=audit(1748529585.307:3175): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.307:3176): prog-id=243 op=LOAD
type=BPF msg=audit(1748529585.307:3177): prog-id=244 op=LOAD
type=BPF msg=audit(1748529585.307:3178): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.307:3179): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.308:3180): prog-id=245 op=LOAD
type=BPF msg=audit(1748529585.308:3181): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.308:3182): prog-id=246 op=LOAD
type=BPF msg=audit(1748529585.308:3183): prog-id=247 op=LOAD
type=BPF msg=audit(1748529585.308:3184): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.308:3185): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.309:3186): prog-id=248 op=LOAD
type=BPF msg=audit(1748529585.309:3187): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.311:3188): prog-id=249 op=LOAD
type=BPF msg=audit(1748529585.311:3189): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.311:3190): prog-id=250 op=LOAD
type=BPF msg=audit(1748529585.311:3191): prog-id=251 op=LOAD
type=BPF msg=audit(1748529585.311:3192): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.311:3193): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.312:3194): prog-id=252 op=LOAD
type=BPF msg=audit(1748529585.312:3195): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.312:3196): prog-id=253 op=LOAD
type=BPF msg=audit(1748529585.312:3197): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.314:3198): prog-id=254 op=LOAD
type=BPF msg=audit(1748529585.314:3199): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529585.314:3200): prog-id=255 op=LOAD
type=BPF msg=audit(1748529585.314:3201): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1748529585.339:3202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748529585.348:3203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748529585.537:3204): pid=24337 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529585.537:3205): pid=24337 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529585.540:3206): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529585.540:3207): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529585.551:3208): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529585.551:3209): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529585.553:3210): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25145 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529585.576:3211): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529585.576:3212): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529585.784:3213): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529585.784:3214): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529585.785:3215): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529585.801:3216): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529585.801:3217): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529585.811:3218): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529585.811:3219): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529585.811:3220): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529585.835:3221): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529585.835:3222): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529585.849:3223): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529585.849:3224): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529585.850:3225): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529585.877:3226): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529585.877:3227): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529585.887:3228): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529585.887:3229): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529585.887:3230): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25214 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529585.905:3231): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529585.905:3232): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529585.915:3233): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529585.915:3234): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529585.916:3235): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25229 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529585.966:3236): pid=25244 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529585.966:3237): pid=25244 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E657061727A6E7669766F63726E66777A7778797A70726F776F79726F7474203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393538352E383034323839332D32353136332D3233313537333738353134373634352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529585.967:3238): pid=25244 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529585.970:3239): pid=25244 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529586.167:3240): pid=25244 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529586.167:3241): pid=25244 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529586.171:3242): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529586.171:3243): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529586.184:3244): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529586.184:3245): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529586.184:3246): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25258 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529586.201:3247): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529586.201:3248): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529586.611:3249): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529586.611:3250): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529586.613:3251): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25277 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529586.630:3252): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529586.630:3253): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529586.638:3254): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529586.638:3255): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529586.639:3256): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25291 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529586.659:3257): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529586.659:3258): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529586.674:3259): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529586.674:3260): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529586.674:3261): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25312 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529586.701:3262): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529586.701:3263): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529586.711:3264): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529586.711:3265): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529586.712:3266): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25326 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529586.729:3267): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529586.729:3268): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529586.740:3269): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529586.740:3270): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529586.740:3271): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25341 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529586.790:3272): pid=25356 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529586.790:3273): pid=25356 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6263756D65787870647468746E61637A6D786E786968716461657A6B6466726C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393538362E363332313134322D32353237352D3137313035323532313037373432372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529586.790:3274): pid=25356 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529586.793:3275): pid=25356 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529587.140:3276): pid=25356 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529587.140:3277): pid=25356 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529587.142:3278): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529587.142:3279): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529587.152:3280): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529587.152:3281): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529587.153:3282): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25369 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529587.170:3283): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529587.170:3284): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529587.722:3285): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529587.722:3286): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529587.723:3287): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25394 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529587.739:3288): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529587.739:3289): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529587.749:3290): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529587.749:3291): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529587.749:3292): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25408 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529587.769:3293): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529587.769:3294): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529587.790:3295): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529587.790:3296): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529587.791:3297): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25429 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529587.818:3298): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529587.818:3299): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529587.828:3300): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529587.828:3301): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529587.829:3302): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25443 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529587.846:3303): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529587.846:3304): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529587.856:3305): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529587.856:3306): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529587.856:3307): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25458 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529587.906:3308): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529587.907:3309): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A72687A6969686F6E626A7172626A7575786B716268677A7670716A61716C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393538372E3734313731332D32353339322D37393933393739393931353935352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529587.907:3310): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529587.908:3311): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529588.057:3312): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529588.058:3313): pid=25473 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529588.060:3314): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.060:3315): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.073:3316): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.073:3317): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.074:3318): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25478 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529588.093:3319): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.093:3320): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.103:3321): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.103:3322): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.104:3323): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25492 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529588.121:3324): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.121:3325): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.236:3326): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.236:3327): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.237:3328): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25508 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529588.264:3329): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.264:3330): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.275:3331): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.275:3332): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.275:3333): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25522 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529588.293:3334): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.293:3335): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.303:3336): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.303:3337): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.304:3338): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25537 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529588.352:3339): pid=25552 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529588.353:3340): pid=25552 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74646E666A676D69726769746A7062756571646E6C6868796D6575716B6D6972203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393538372E3734313731332D32353339322D37393933393739393931353935352F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529588.353:3341): pid=25552 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529588.354:3342): pid=25552 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529588.509:3343): pid=25552 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529588.509:3344): pid=25552 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529588.511:3345): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.511:3346): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.522:3347): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.522:3348): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.523:3349): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25556 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529588.540:3350): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.540:3351): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.746:3352): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.746:3353): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.747:3354): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529588.763:3355): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.763:3356): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.773:3357): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.773:3358): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.774:3359): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25587 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529588.795:3360): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.795:3361): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.809:3362): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.809:3363): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.810:3364): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25608 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529588.837:3365): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.837:3366): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.847:3367): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.847:3368): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.848:3369): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25622 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529588.868:3370): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529588.868:3371): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529588.878:3372): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529588.878:3373): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529588.879:3374): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529588.932:3375): pid=25652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529588.932:3376): pid=25652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71677568706B757067736C67636B6E697261727179627376786769727869657A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393538382E3736353630352D32353537312D3234353133333537373830373037392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529588.933:3377): pid=25652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529588.934:3378): pid=25652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529589.819:3379): pid=25652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529589.819:3380): pid=25652 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529589.822:3381): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529589.822:3382): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529589.832:3383): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529589.832:3384): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529589.833:3385): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25662 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529589.852:3386): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529589.852:3387): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529590.064:3388): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529590.064:3389): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529590.065:3390): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25679 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529590.082:3391): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529590.082:3392): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529590.091:3393): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529590.091:3394): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529590.092:3395): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529590.113:3396): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529590.113:3397): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529590.127:3398): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529590.127:3399): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529590.128:3400): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25714 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529590.155:3401): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529590.156:3402): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529590.166:3403): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529590.166:3404): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529590.167:3405): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25728 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529590.187:3406): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529590.187:3407): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529590.196:3408): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529590.196:3409): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529590.197:3410): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25743 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529590.246:3411): pid=25758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529590.246:3412): pid=25758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E78796B7476706972746D68656D766F75796F627475626965756673797167203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393539302E303834323735322D32353637372D37373036343137323731323337322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529590.247:3413): pid=25758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529590.248:3414): pid=25758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529590.456:3415): pid=25758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529590.457:3416): pid=25758 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529590.459:3417): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529590.459:3418): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529590.470:3419): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529590.470:3420): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529590.471:3421): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25771 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529590.488:3422): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529590.488:3423): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.150:3424): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.150:3425): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.151:3426): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25794 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529591.168:3427): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.168:3428): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.177:3429): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.177:3430): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.178:3431): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25808 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529591.201:3432): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.201:3433): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.215:3434): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.215:3435): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.216:3436): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25829 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529591.243:3437): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.243:3438): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.253:3439): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.253:3440): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.254:3441): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25843 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529591.272:3442): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.272:3443): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.283:3444): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.283:3445): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.283:3446): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25858 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529591.336:3447): pid=25873 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529591.336:3448): pid=25873 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E766E616A736F7268696765656A6568786C65626B646B676B6B7965646D6863203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393539312E313639383130332D32353739322D3236373637343230323735363331352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529591.336:3449): pid=25873 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529591.337:3450): pid=25873 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529591.559:3451): pid=25873 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529591.559:3452): pid=25873 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529591.562:3453): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.562:3454): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.573:3455): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.573:3456): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.574:3457): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529591.593:3458): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.593:3459): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.843:3460): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.843:3461): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.844:3462): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529591.862:3463): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.862:3464): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.871:3465): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.871:3466): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.872:3467): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25917 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529591.892:3468): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.892:3469): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.908:3470): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.908:3471): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.909:3472): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529591.937:3473): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.937:3474): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.949:3475): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.949:3476): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.950:3477): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25952 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529591.969:3478): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529591.969:3479): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529591.979:3480): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529591.979:3481): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529591.980:3482): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25967 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529592.030:3483): pid=25982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529592.030:3484): pid=25982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617365776B786373726F776666706363676C7875797163756D6B6C6164707777203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393539312E383634323437382D32353930312D36373838323637333431323933362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529592.031:3485): pid=25982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529592.032:3486): pid=25982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529592.291:3487): pid=25982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529592.291:3488): pid=25982 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529592.294:3489): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529592.294:3490): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529592.304:3491): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529592.304:3492): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529592.305:3493): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=25992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529592.323:3494): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529592.323:3495): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529592.592:3496): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529592.592:3497): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529592.593:3498): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529592.610:3499): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529592.610:3500): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529592.619:3501): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529592.619:3502): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529592.620:3503): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26023 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529592.640:3504): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529592.640:3505): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529592.655:3506): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529592.655:3507): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529592.655:3508): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26044 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529592.683:3509): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529592.683:3510): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529592.694:3511): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529592.694:3512): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529592.695:3513): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26058 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529592.713:3514): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529592.713:3515): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529592.724:3516): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529592.724:3517): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529592.725:3518): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26073 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748529592.774:3519): pid=26088 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748529592.774:3520): pid=26088 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6C6261707376656F797072767A6C7262696E76716F74786D65796C77766862203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383532393539322E363132313037382D32363030372D3134313334393438353832303633372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748529592.775:3521): pid=26088 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748529592.776:3522): pid=26088 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529593.004:3523): pid=26088 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748529593.005:3524): pid=26088 uid=1000 auid=1000 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748529593.007:3525): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529593.007:3526): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748529593.017:3527): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748529593.017:3528): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529593.017:3529): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26098 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529593.036:3530): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529593.036:3531): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_END msg=audit(1748529593.154:3532): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748529593.155:3533): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529593.155:3534): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13510 suid=1000 rport=59898 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529593.155:3535): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13510 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529593.157:3536): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529593.157:3537): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529593.158:3538): pid=13507 uid=0 auid=1000 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=13507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=BPF msg=audit(1748529599.938:3539): prog-id=256 op=LOAD
type=BPF msg=audit(1748529599.939:3540): prog-id=257 op=LOAD
type=SYSCALL msg=audit(1748529599.939:3540): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000141ad0 a2=90 a3=0 items=0 ppid=26146 pid=26158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529599.939:3540): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263316536373330633639663466623036643964613034353137623736
type=BPF msg=audit(1748529599.939:3541): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529599.939:3542): prog-id=258 op=LOAD
type=SYSCALL msg=audit(1748529599.939:3542): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000141c48 a2=90 a3=0 items=0 ppid=26146 pid=26158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529599.939:3542): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263316536373330633639663466623036643964613034353137623736
type=BPF msg=audit(1748529599.939:3543): prog-id=259 op=LOAD
type=SYSCALL msg=audit(1748529599.939:3543): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001419d8 a2=90 a3=0 items=0 ppid=26146 pid=26158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529599.939:3543): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263316536373330633639663466623036643964613034353137623736
type=BPF msg=audit(1748529599.939:3544): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529599.939:3545): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529599.939:3546): prog-id=260 op=LOAD
type=SYSCALL msg=audit(1748529599.939:3546): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000141eb0 a2=90 a3=0 items=0 ppid=26146 pid=26158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529599.939:3546): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263316536373330633639663466623036643964613034353137623736
type=BPF msg=audit(1748529600.051:3547): prog-id=261 op=LOAD
type=SYSCALL msg=audit(1748529600.051:3547): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=26146 pid=26190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.051:3547): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963383130396631636139376661643064393463633730303164666436
type=BPF msg=audit(1748529600.051:3548): prog-id=262 op=LOAD
type=SYSCALL msg=audit(1748529600.051:3548): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=26146 pid=26190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.051:3548): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963383130396631636139376661643064393463633730303164666436
type=BPF msg=audit(1748529600.051:3549): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529600.051:3550): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748529600.051:3551): prog-id=263 op=LOAD
type=SYSCALL msg=audit(1748529600.051:3551): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=26146 pid=26190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.051:3551): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963383130396631636139376661643064393463633730303164666436
type=NETFILTER_CFG msg=audit(1748529600.211:3552): table=mangle family=2 entries=10 op=xt_replace pid=26252 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.211:3552): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558862dc4f40 items=0 ppid=26202 pid=26252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.211:3552): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1748529600.211:3553): table=mangle family=10 entries=10 op=xt_replace pid=26253 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.211:3553): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e1057cc1b0 items=0 ppid=26202 pid=26253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.211:3553): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65
type=NETFILTER_CFG msg=audit(1748529600.212:3554): table=nat family=2 entries=25 op=xt_replace pid=26255 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.212:3554): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5557fdd3f820 items=0 ppid=26202 pid=26255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.212:3554): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1748529600.212:3555): table=nat family=10 entries=19 op=xt_replace pid=26256 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.212:3555): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ba2da715a0 items=0 ppid=26202 pid=26256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.212:3555): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174
type=NETFILTER_CFG msg=audit(1748529600.213:3556): table=filter family=2 entries=31 op=xt_replace pid=26257 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.213:3556): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f7cd656260 items=0 ppid=26202 pid=26257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.213:3556): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.313:3557): table=filter family=10 entries=11 op=xt_replace pid=26258 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.313:3557): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d41345e760 items=0 ppid=26202 pid=26258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.313:3557): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.315:3558): table=filter family=2 entries=33 op=xt_replace pid=26260 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.315:3558): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d6248e5440 items=0 ppid=26202 pid=26260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.315:3558): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.318:3559): table=filter family=2 entries=35 op=xt_replace pid=26262 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.318:3559): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562a71e64770 items=0 ppid=26202 pid=26262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.318:3559): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365
type=NETFILTER_CFG msg=audit(1748529600.321:3560): table=filter family=2 entries=36 op=xt_replace pid=26265 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.321:3560): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5647575a9ca0 items=0 ppid=26202 pid=26265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.321:3560): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669
type=NETFILTER_CFG msg=audit(1748529600.322:3561): table=filter family=2 entries=37 op=xt_replace pid=26266 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.322:3561): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ff5a7500b0 items=0 ppid=26202 pid=26266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.322:3561): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.325:3562): table=filter family=2 entries=39 op=xt_replace pid=26268 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.325:3562): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c40782e940 items=0 ppid=26202 pid=26268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.325:3562): proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453
type=NETFILTER_CFG msg=audit(1748529600.326:3563): table=filter family=2 entries=40 op=xt_replace pid=26269 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.326:3563): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56028db59640 items=0 ppid=26202 pid=26269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.326:3563): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.328:3564): table=filter family=2 entries=42 op=xt_replace pid=26271 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.328:3564): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5619a986d980 items=0 ppid=26202 pid=26271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.328:3564): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D
type=NETFILTER_CFG msg=audit(1748529600.331:3565): table=filter family=2 entries=43 op=xt_replace pid=26274 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.331:3565): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55bff8c9ced0 items=0 ppid=26202 pid=26274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.331:3565): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53
type=NETFILTER_CFG msg=audit(1748529600.332:3566): table=filter family=2 entries=44 op=xt_replace pid=26275 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.332:3566): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558dd39c52c0 items=0 ppid=26202 pid=26275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.332:3566): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.335:3567): table=filter family=2 entries=46 op=xt_replace pid=26277 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.335:3567): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5577f864bb40 items=0 ppid=26202 pid=26277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.335:3567): proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244
type=NETFILTER_CFG msg=audit(1748529600.336:3568): table=nat family=2 entries=27 op=xt_replace pid=26278 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.336:3568): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fbc1fab9f0 items=0 ppid=26202 pid=26278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.336:3568): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174
type=NETFILTER_CFG msg=audit(1748529600.338:3569): table=nat family=2 entries=29 op=xt_replace pid=26280 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.338:3569): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5566e9ec5280 items=0 ppid=26202 pid=26280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.338:3569): proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1748529600.341:3570): table=nat family=2 entries=30 op=xt_replace pid=26283 subj=system_u:system_r:spc_t:s0 comm="iptables"
type=SYSCALL msg=audit(1748529600.341:3570): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55dc3ac9a630 items=0 ppid=26202 pid=26283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.341:3570): proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1748529600.358:3571): table=filter family=2 entries=47 op=xt_replace pid=26289 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748529600.358:3571): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559ef62f02a0 items=0 ppid=26202 pid=26289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.358:3571): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748529600.365:3572): table=nat family=2 entries=31 op=xt_replace pid=26289 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748529600.365:3572): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559ef62f2630 items=0 ppid=26202 pid=26289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.365:3572): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748529600.366:3573): table=filter family=10 entries=13 op=xt_replace pid=26292 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.366:3573): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56150c31a9a0 items=0 ppid=26202 pid=26292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.366:3573): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.368:3574): table=filter family=10 entries=15 op=xt_replace pid=26294 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.368:3574): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556493a8ad90 items=0 ppid=26202 pid=26294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.368:3574): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963
type=NETFILTER_CFG msg=audit(1748529600.371:3575): table=filter family=10 entries=16 op=xt_replace pid=26297 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.371:3575): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556053107320 items=0 ppid=26202 pid=26297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.371:3575): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276
type=NETFILTER_CFG msg=audit(1748529600.372:3576): table=filter family=10 entries=17 op=xt_replace pid=26298 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.372:3576): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ea88429760 items=0 ppid=26202 pid=26298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.372:3576): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.375:3577): table=filter family=10 entries=19 op=xt_replace pid=26300 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.375:3577): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564ff6a270b0 items=0 ppid=26202 pid=26300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.375:3577): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453
type=NETFILTER_CFG msg=audit(1748529600.376:3578): table=filter family=10 entries=20 op=xt_replace pid=26301 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.376:3578): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5576ab481dd0 items=0 ppid=26202 pid=26301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.376:3578): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.378:3579): table=filter family=10 entries=22 op=xt_replace pid=26303 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.378:3579): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564816abe1c0 items=0 ppid=26202 pid=26303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.378:3579): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245
type=NETFILTER_CFG msg=audit(1748529600.381:3580): table=filter family=10 entries=23 op=xt_replace pid=26306 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.381:3580): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55bedbe43770 items=0 ppid=26202 pid=26306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.381:3580): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D
type=NETFILTER_CFG msg=audit(1748529600.383:3581): table=filter family=10 entries=24 op=xt_replace pid=26307 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.383:3581): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ed8eb20b90 items=0 ppid=26202 pid=26307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.383:3581): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572
type=NETFILTER_CFG msg=audit(1748529600.385:3582): table=filter family=10 entries=26 op=xt_replace pid=26309 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.385:3582): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563f40ca64e0 items=0 ppid=26202 pid=26309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.385:3582): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244
type=NETFILTER_CFG msg=audit(1748529600.386:3583): table=nat family=10 entries=21 op=xt_replace pid=26310 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.386:3583): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563b737377e0 items=0 ppid=26202 pid=26310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.386:3583): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174
type=NETFILTER_CFG msg=audit(1748529600.388:3584): table=nat family=10 entries=23 op=xt_replace pid=26312 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.388:3584): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55958eca7140 items=0 ppid=26202 pid=26312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.388:3584): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1748529600.391:3585): table=nat family=10 entries=24 op=xt_replace pid=26315 subj=system_u:system_r:spc_t:s0 comm="ip6tables"
type=SYSCALL msg=audit(1748529600.391:3585): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557c3ccc9570 items=0 ppid=26202 pid=26315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.391:3585): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553
type=NETFILTER_CFG msg=audit(1748529600.397:3586): table=filter family=10 entries=27 op=xt_replace pid=26321 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1748529600.397:3586): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55fbd56da930 items=0 ppid=26202 pid=26321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.397:3586): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748529600.398:3587): table=nat family=10 entries=25 op=xt_replace pid=26321 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1748529600.398:3587): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55fbd56dc910 items=0 ppid=26202 pid=26321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748529600.398:3587): proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=CRYPTO_KEY_USER msg=audit(1748529653.047:3588): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15539 suid=1000 rport=34774 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529653.047:3589): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15539 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748529653.051:3590): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748529653.051:3591): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748529653.052:3592): pid=15531 uid=0 auid=1000 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=15531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1748529663.289:3593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529663.311:3594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748529742.785:3595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748530146.069:3596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748530146.069:3597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530471.943:3598): pid=26420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26420 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748530471.944:3599): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26420 suid=74 rport=60714 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748530471.944:3600): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26420 suid=74 rport=60714 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748530472.006:3601): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530472.006:3602): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748530472.037:3603): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530472.038:3604): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26420 suid=74 rport=60714 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748530472.039:3605): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748530472.039:3606): pid=26419 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=26 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748530472.039:3606): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcf2bc6190 a2=4 a3=3e8 items=0 ppid=12358 pid=26419 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530472.039:3606): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748530472.040:3607): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748530472.067:3608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748530472.105:3609): pid=26423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1748530472.106:3610): pid=26423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1748530472.106:3611): pid=26423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748530472.106:3612): pid=26423 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=27 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748530472.106:3612): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc018d9bf0 a2=4 a3=3e8 items=0 ppid=1 pid=26423 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530472.106:3612): proctitle="(systemd)"
type=USER_START msg=audit(1748530472.107:3613): pid=26423 uid=0 auid=1000 ses=27 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748530472.188:3614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748530472.202:3615): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530472.203:3616): pid=26434 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26434 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748530472.204:3617): pid=26434 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748530472.247:3618): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530472.247:3619): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530472.248:3620): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530472.459:3621): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26434 suid=1000 rport=60714 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530472.459:3622): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26434 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530472.460:3623): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748530472.460:3624): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748530472.461:3625): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530472.461:3626): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530472.461:3627): pid=26419 uid=0 auid=1000 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748530472.475:3628): pid=26450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748530472.476:3629): pid=26449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26450 suid=74 rport=60718 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748530472.476:3630): pid=26449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26450 suid=74 rport=60718 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748530472.537:3631): pid=26449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530472.537:3632): pid=26449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748530472.569:3633): pid=26449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530472.569:3634): pid=26449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26450 suid=74 rport=60718 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748530472.570:3635): pid=26449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748530472.570:3636): pid=26449 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=28 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748530472.570:3636): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc3cf03590 a2=4 a3=3e8 items=0 ppid=12358 pid=26449 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530472.570:3636): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748530472.571:3637): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748530472.590:3638): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530472.591:3639): pid=26452 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748530472.592:3640): pid=26452 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748530472.635:3641): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530472.635:3642): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530472.636:3643): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26453 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530483.527:3644): pid=26801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748530483.527:3645): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26801 suid=74 rport=41670 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748530483.528:3646): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26801 suid=74 rport=41670 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1748530483.624:3647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1748530483.657:3648): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530483.657:3649): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748530483.690:3650): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530483.690:3651): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26801 suid=74 rport=41670 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748530483.692:3652): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748530483.692:3653): pid=26800 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=29 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748530483.692:3653): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff0033b430 a2=4 a3=3e8 items=0 ppid=12358 pid=26800 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530483.692:3653): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748530483.693:3654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748530483.709:3655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530483.710:3656): pid=26808 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748530483.711:3657): pid=26808 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748530483.723:3658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530483.723:3659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530483.724:3660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26809 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530483.741:3661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530483.741:3662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530483.750:3663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530483.750:3664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530483.751:3665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26823 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530483.770:3666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530483.770:3667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530483.780:3668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530483.780:3669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530483.781:3670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26843 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530483.799:3671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530483.799:3672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530483.808:3673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530483.808:3674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530483.809:3675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530483.855:3676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530483.855:3677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530483.869:3678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530483.869:3679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530483.870:3680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26875 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530483.910:3681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530483.910:3682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530483.919:3683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530483.920:3684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530483.920:3685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530483.938:3686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530483.938:3687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530483.948:3688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530483.948:3689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530483.949:3690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26904 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530484.001:3691): pid=26919 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530484.001:3692): pid=26919 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74677A6E6C79787877686175767864667A70616970666F6D6878786767787572203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303438332E3734333438372D32363739382D3234383237303236303037373331342F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530484.002:3693): pid=26919 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530484.004:3694): pid=26919 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530484.558:3695): pid=26919 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530484.558:3696): pid=26919 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530484.560:3697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530484.560:3698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530484.572:3699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530484.572:3700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530484.573:3701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530484.591:3702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530484.592:3703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530484.916:3704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530484.916:3705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530484.917:3706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26976 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530484.933:3707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530484.933:3708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530484.942:3709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530484.942:3710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530484.943:3711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530484.964:3712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530484.964:3713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530484.978:3714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530484.978:3715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530484.979:3716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530485.015:3717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530485.015:3718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530485.025:3719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530485.025:3720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530485.026:3721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530485.044:3722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530485.044:3723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530485.056:3724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530485.056:3725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530485.056:3726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27040 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530485.109:3727): pid=27055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530485.110:3728): pid=27055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63616478716B6867766E7765707864677872656F6C7A776B7370616668686469203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303438342E393335343035352D32363937342D3236363132373232303239393236322F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530485.110:3729): pid=27055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530485.112:3730): pid=27055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530485.697:3731): pid=27055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530485.697:3732): pid=27055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530485.700:3733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530485.700:3734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530485.712:3735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530485.712:3736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530485.712:3737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27094 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530485.730:3738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530485.730:3739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530486.792:3740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530486.792:3741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530486.793:3742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530486.810:3743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530486.810:3744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530486.819:3745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530486.819:3746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530486.820:3747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27137 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530486.840:3748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530486.840:3749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530486.954:3750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530486.954:3751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530486.955:3752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530486.982:3753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530486.982:3754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530486.992:3755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530486.992:3756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530486.993:3757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27172 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530487.010:3758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530487.010:3759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530487.020:3760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530487.020:3761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530487.021:3762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27187 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530487.069:3763): pid=27202 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530487.069:3764): pid=27202 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6468786E79637074797A76766378686C6F796C66796E69786E7478736B68736B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303438362E383131383930312D32373132312D36383237373434323835343638302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530487.070:3765): pid=27202 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530487.071:3766): pid=27202 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530487.230:3767): pid=27202 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530487.230:3768): pid=27202 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530487.233:3769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530487.233:3770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530487.242:3771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530487.242:3772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530487.243:3773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27206 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530487.261:3774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530487.261:3775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530487.476:3776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530487.476:3777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530487.477:3778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530487.494:3779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530487.494:3780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530487.503:3781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530487.503:3782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530487.504:3783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530487.527:3784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530487.527:3785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530487.541:3786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530487.541:3787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530487.542:3788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27258 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530487.574:3789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530487.575:3790): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530487.584:3791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530487.584:3792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530487.585:3793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530487.605:3794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530487.605:3795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530487.615:3796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530487.615:3797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530487.616:3798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27287 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530487.666:3799): pid=27302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530487.666:3800): pid=27302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B6C6D6770747667726174736E616A666E74666D6C737A6B64646E6E677573203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303438372E343936313638312D32373232312D3134343238323230393730323136302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530487.667:3801): pid=27302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530487.668:3802): pid=27302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530487.830:3803): pid=27302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530487.831:3804): pid=27302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530487.833:3805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530487.833:3806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530487.842:3807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530487.843:3808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530487.844:3809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27306 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530487.863:3810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530487.863:3811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.085:3812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.085:3813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.086:3814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27323 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530488.103:3815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530488.103:3816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.112:3817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.112:3818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.113:3819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27337 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530488.133:3820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530488.133:3821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.259:3822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.259:3823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.260:3824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27358 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530488.286:3825): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530488.286:3826): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.295:3827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.295:3828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.296:3829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27372 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530488.313:3830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530488.313:3831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.322:3832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.322:3833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.323:3834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27387 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530488.372:3835): pid=27402 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530488.372:3836): pid=27402 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6E7A616E6C7670687269716E767A74777272756767706B6769787A626B6173203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303438382E313035343736342D32373332312D39323234343633363639333732302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530488.372:3837): pid=27402 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530488.374:3838): pid=27402 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530488.518:3839): pid=27402 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530488.518:3840): pid=27402 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530488.520:3841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530488.520:3842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.533:3843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.533:3844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.533:3845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27407 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530488.552:3846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530488.552:3847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.562:3848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.562:3849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.562:3850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27421 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530488.580:3851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530488.580:3852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.729:3853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.729:3854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.730:3855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27437 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530488.758:3856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530488.758:3857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.769:3858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.769:3859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.770:3860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27451 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530488.788:3861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530488.788:3862): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530488.798:3863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530488.798:3864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530488.799:3865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530488.848:3866): pid=27481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530488.848:3867): pid=27481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63746C6B62767A6A7573746A6A6C686C696B666763696F706F6E71676A676578203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303438382E313035343736342D32373332312D39323234343633363639333732302F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530488.848:3868): pid=27481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530488.850:3869): pid=27481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530489.013:3870): pid=27481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530489.013:3871): pid=27481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530489.015:3872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.015:3873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.026:3874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.026:3875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.027:3876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.045:3877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.045:3878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.267:3879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.267:3880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.268:3881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27502 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.284:3882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.284:3883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.292:3884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.292:3885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.293:3886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27516 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.313:3887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.313:3888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.343:3889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.343:3890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.343:3891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27537 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.370:3892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.370:3893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.379:3894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.380:3895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.380:3896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.397:3897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.397:3898): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.407:3899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.407:3900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.407:3901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530489.456:3902): pid=27581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530489.456:3903): pid=27581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6A67676F7273666163767674726D6D7A686A7A6D74666278626E7673727166203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303438392E323835383037362D32373530302D3137313031363330303136313435392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530489.456:3904): pid=27581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530489.458:3905): pid=27581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530489.604:3906): pid=27581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530489.604:3907): pid=27581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530489.606:3908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.606:3909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.620:3910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.620:3911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.620:3912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.640:3913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.640:3914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.649:3915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.649:3916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.650:3917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27600 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.668:3918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.668:3919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.681:3920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.681:3921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.682:3922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27616 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.708:3923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.708:3924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.718:3925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.718:3926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.719:3927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27630 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.736:3928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.736:3929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.747:3930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.747:3931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.747:3932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27645 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530489.797:3933): pid=27660 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530489.797:3934): pid=27660 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67706A73766F7174796D6F686F61616C7A73796466707572686F73616772796D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303438392E323835383037362D32373530302D3137313031363330303136313435392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530489.797:3935): pid=27660 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530489.799:3936): pid=27660 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530489.958:3937): pid=27660 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530489.958:3938): pid=27660 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530489.961:3939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.961:3940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530489.970:3941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530489.970:3942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530489.971:3943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27664 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530489.988:3944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530489.989:3945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530490.410:3946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530490.410:3947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530490.411:3948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27683 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530490.427:3949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530490.427:3950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530490.435:3951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530490.435:3952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530490.436:3953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27697 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530490.456:3954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530490.456:3955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530490.560:3956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530490.560:3957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530490.561:3958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530490.587:3959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530490.587:3960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530490.597:3961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530490.597:3962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530490.598:3963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27732 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530490.615:3964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530490.615:3965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530490.625:3966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530490.625:3967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530490.626:3968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27747 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530490.674:3969): pid=27762 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530490.675:3970): pid=27762 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6771736C64657176727A78646971706F69627165796C63746872656374736879203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303439302E343238383337382D32373638312D3133363432393135303038363230332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530490.675:3971): pid=27762 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530490.676:3972): pid=27762 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530496.843:3973): pid=27762 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530496.844:3974): pid=27762 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530496.846:3975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530496.846:3976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530496.856:3977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530496.857:3978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530496.857:3979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27825 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530496.876:3980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530496.876:3981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530497.132:3982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530497.132:3983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530497.132:3984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27841 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530497.149:3985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530497.149:3986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530497.157:3987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530497.158:3988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530497.158:3989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27855 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530497.178:3990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530497.178:3991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530497.191:3992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530497.191:3993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530497.192:3994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27876 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530497.218:3995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530497.218:3996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530497.228:3997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530497.228:3998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530497.229:3999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27890 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530497.245:4000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530497.245:4001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530497.254:4002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530497.254:4003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530497.255:4004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27905 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530497.304:4005): pid=27920 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530497.304:4006): pid=27920 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69706E74717765776D6E6670756A74716A746B696B676F6D74786F6671667572203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303439372E313530383530332D32373638312D31383537333834313433383239392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530497.304:4007): pid=27920 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530497.306:4008): pid=27920 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530497.916:4009): pid=27920 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530497.916:4010): pid=27920 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530497.919:4011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530497.919:4012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530497.928:4013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530497.928:4014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530497.929:4015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27942 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530497.946:4016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530497.946:4017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530498.155:4018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530498.155:4019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530498.156:4020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27958 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530498.172:4021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530498.172:4022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530498.180:4023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530498.180:4024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530498.181:4025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27972 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530498.200:4026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530498.201:4027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530498.214:4028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530498.214:4029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530498.215:4030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=27993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530498.241:4031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530498.241:4032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530498.251:4033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530498.251:4034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530498.252:4035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28007 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530498.269:4036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530498.269:4037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530498.278:4038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530498.278:4039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530498.279:4040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28022 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530498.327:4041): pid=28037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530498.327:4042): pid=28037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68657A656C69786F796D6A666A73796E716A7A6264657464676D73707578736A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303439382E313733373332352D32373935362D3237333831313739373531313332362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530498.328:4043): pid=28037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530498.329:4044): pid=28037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530498.485:4045): pid=28037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530498.485:4046): pid=28037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530498.488:4047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530498.488:4048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530498.497:4049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530498.497:4050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530498.498:4051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530498.515:4052): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530498.515:4053): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530498.909:4054): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530498.909:4055): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530498.910:4056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28060 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530498.926:4057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530498.927:4058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530498.936:4059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530498.936:4060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530498.937:4061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28074 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530498.957:4062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530498.957:4063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.061:4064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.061:4065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.061:4066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530499.092:4067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.092:4068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.102:4069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.103:4070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.103:4071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530499.121:4072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.121:4073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.132:4074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.132:4075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.133:4076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530499.182:4077): pid=28139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530499.183:4078): pid=28139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6770656F717A6F7163686E666B7A6E726B6D72777A736D636F6B737661676B68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303439382E393238373237362D32383035382D3231343432393236383538383134362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530499.183:4079): pid=28139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530499.184:4080): pid=28139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530499.335:4081): pid=28139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530499.335:4082): pid=28139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530499.337:4083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.337:4084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.349:4085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.349:4086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.350:4087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530499.369:4088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.369:4089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.378:4090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.378:4091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.378:4092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530499.395:4093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.395:4094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.408:4095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.408:4096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.409:4097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28174 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530499.435:4098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.435:4099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.445:4100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.445:4101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.445:4102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530499.463:4103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.463:4104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.472:4105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.472:4106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.473:4107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530499.522:4108): pid=28218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530499.522:4109): pid=28218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7563706372706F6B6461687666656A7570687379727A727A65726A797A767071203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303439382E393238373237362D32383035382D3231343432393236383538383134362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530499.523:4110): pid=28218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530499.524:4111): pid=28218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530499.680:4112): pid=28218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530499.680:4113): pid=28218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530499.683:4114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.683:4115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.695:4116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.695:4117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.696:4118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28222 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530499.714:4119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.714:4120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.937:4121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.938:4122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.938:4123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28239 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530499.955:4124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.956:4125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530499.965:4126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530499.965:4127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530499.966:4128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28253 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530499.987:4129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530499.987:4130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530500.120:4131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530500.120:4132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530500.121:4133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28274 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530500.152:4134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530500.152:4135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530500.162:4136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530500.162:4137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530500.163:4138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530500.182:4139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530500.182:4140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530500.192:4141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530500.192:4142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530500.193:4143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530500.243:4144): pid=28318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530500.243:4145): pid=28318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530500.244:4146): pid=28318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530500.245:4147): pid=28318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530502.493:4148): prog-id=264 op=LOAD
type=BPF msg=audit(1748530502.493:4149): prog-id=265 op=LOAD
type=SYSCALL msg=audit(1748530502.493:4149): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=28614 pid=28624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530502.493:4149): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333462323762386636333831353632623137663230653135
type=BPF msg=audit(1748530502.494:4150): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530502.494:4151): prog-id=266 op=LOAD
type=SYSCALL msg=audit(1748530502.494:4151): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=28614 pid=28624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530502.494:4151): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333462323762386636333831353632623137663230653135
type=BPF msg=audit(1748530502.494:4152): prog-id=267 op=LOAD
type=SYSCALL msg=audit(1748530502.494:4152): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=28614 pid=28624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530502.494:4152): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333462323762386636333831353632623137663230653135
type=BPF msg=audit(1748530502.494:4153): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530502.494:4154): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530502.494:4155): prog-id=268 op=LOAD
type=SYSCALL msg=audit(1748530502.494:4155): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=28614 pid=28624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530502.494:4155): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34333462323762386636333831353632623137663230653135
type=USER_END msg=audit(1748530502.570:4156): pid=28318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530502.570:4157): pid=28318 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530502.573:4158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530502.573:4159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530502.583:4160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530502.583:4161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530502.583:4162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28708 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530502.601:4163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530502.601:4164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530503.045:4165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530503.045:4166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530503.046:4167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28742 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530503.063:4168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530503.063:4169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530503.072:4170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530503.072:4171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530503.073:4172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530503.095:4173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530503.095:4174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530503.109:4175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530503.109:4176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530503.109:4177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28777 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530503.137:4178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530503.137:4179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530503.147:4180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530503.147:4181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530503.148:4182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28791 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530503.166:4183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530503.166:4184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530503.176:4185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530503.176:4186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530503.177:4187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28806 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530503.228:4188): pid=28821 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530503.228:4189): pid=28821 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67687474757A6E67706370746B7871796D6B69716A676A706E6C786979736F65203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303530332E303635343332332D32383734302D3132383533343839393635313133312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530503.229:4190): pid=28821 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530503.230:4191): pid=28821 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530507.259:4192): pid=28821 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530507.259:4193): pid=28821 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530507.261:4194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530507.261:4195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530507.271:4196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530507.271:4197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530507.272:4198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28848 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530507.290:4199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530507.290:4200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530507.514:4201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530507.514:4202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530507.514:4203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28864 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530507.531:4204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530507.531:4205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530507.540:4206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530507.540:4207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530507.541:4208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28878 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530507.562:4209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530507.562:4210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530507.576:4211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530507.576:4212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530507.576:4213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530507.604:4214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530507.604:4215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530507.614:4216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530507.614:4217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530507.614:4218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28913 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530507.631:4219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530507.632:4220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530507.641:4221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530507.641:4222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530507.642:4223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28928 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530507.691:4224): pid=28943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530507.691:4225): pid=28943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65736A75617676766C67737375776C7661776C616B7A71766E6B6C6B74756F6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303530372E353333323437352D32383734302D3138373338383538333230383335352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530507.691:4226): pid=28943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530507.693:4227): pid=28943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530511.953:4228): pid=28943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530511.953:4229): pid=28943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530511.955:4230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530511.955:4231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530511.965:4232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530511.965:4233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530511.966:4234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28967 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530511.983:4235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530511.983:4236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530512.208:4237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530512.208:4238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530512.209:4239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28982 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530512.225:4240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530512.225:4241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530512.234:4242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530512.234:4243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530512.234:4244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=28996 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530512.254:4245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530512.254:4246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530512.268:4247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530512.268:4248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530512.269:4249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29017 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530512.296:4250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530512.296:4251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530512.305:4252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530512.305:4253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530512.306:4254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29031 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530512.324:4255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530512.324:4256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530512.333:4257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530512.333:4258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530512.334:4259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29046 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530512.384:4260): pid=29061 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530512.384:4261): pid=29061 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767A746679636678696C6767706C647A7774797664617A696368657467716473203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303531322E323236393832362D32383734302D3237373238393937363031343830302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530512.385:4262): pid=29061 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530512.386:4263): pid=29061 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530518.316:4264): pid=29061 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530518.316:4265): pid=29061 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530518.318:4266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530518.318:4267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530518.328:4268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530518.328:4269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530518.328:4270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29085 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530518.346:4271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530518.346:4272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530518.566:4273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530518.566:4274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530518.567:4275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29100 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530518.583:4276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530518.583:4277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530518.592:4278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530518.592:4279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530518.592:4280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530518.612:4281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530518.612:4282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530518.625:4283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530518.625:4284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530518.625:4285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530518.651:4286): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530518.651:4287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530518.661:4288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530518.661:4289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530518.662:4290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29149 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530518.678:4291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530518.679:4292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530518.687:4293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530518.687:4294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530518.688:4295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29164 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530518.739:4296): pid=29179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530518.739:4297): pid=29179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F7A69637264706F706874706B756E716B766B666565707268656767736466203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303531382E353835323334322D32383734302D31353832303232323231393931352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530518.739:4298): pid=29179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530518.741:4299): pid=29179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530522.180:4300): pid=29179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530522.180:4301): pid=29179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530522.182:4302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530522.182:4303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530522.191:4304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530522.191:4305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530522.192:4306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530522.211:4307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530522.211:4308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530522.441:4309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530522.441:4310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530522.442:4311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530522.458:4312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530522.458:4313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530522.467:4314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530522.467:4315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530522.468:4316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29231 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530522.490:4317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530522.490:4318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530522.503:4319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530522.503:4320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530522.504:4321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29252 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530522.535:4322): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530522.535:4323): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530522.546:4324): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530522.546:4325): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530522.546:4326): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29266 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530522.563:4327): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530522.563:4328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530522.572:4329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530522.572:4330): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530522.573:4331): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29281 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530522.622:4332): pid=29296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530522.622:4333): pid=29296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A79756D646469646F6769757975636969716C7A74726D7470737A656C6461203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303532322E3436303439382D32383734302D3231373833313936323734333731312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530522.622:4334): pid=29296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530522.624:4335): pid=29296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530524.441:4336): pid=29296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530524.441:4337): pid=29296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530524.443:4338): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530524.443:4339): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530524.453:4340): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530524.453:4341): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530524.453:4342): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29319 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530524.472:4343): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530524.472:4344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530524.709:4345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530524.709:4346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530524.710:4347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29334 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530524.727:4348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530524.727:4349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530524.736:4350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530524.736:4351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530524.737:4352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29348 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530524.758:4353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530524.758:4354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530524.772:4355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530524.772:4356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530524.773:4357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29369 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530524.800:4358): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530524.800:4359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530524.809:4360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530524.809:4361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530524.810:4362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29383 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530524.828:4363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530524.828:4364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530524.838:4365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530524.838:4366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530524.839:4367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530524.889:4368): pid=29413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530524.889:4369): pid=29413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6874757569646874636D62776B746A666B62776B727A7271646B677274737866203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303532342E373239333235382D32383734302D3231313134383233323238353437372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530524.890:4370): pid=29413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530524.891:4371): pid=29413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530525.283:4372): pid=29413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530525.284:4373): pid=29413 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530525.286:4374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530525.286:4375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530525.296:4376): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530525.296:4377): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530525.297:4378): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29429 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530525.318:4379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530525.318:4380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530525.562:4381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530525.562:4382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530525.563:4383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29445 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530525.580:4384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530525.580:4385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530525.589:4386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530525.589:4387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530525.590:4388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29459 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530525.610:4389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530525.610:4390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530525.624:4391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530525.624:4392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530525.625:4393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530525.652:4394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530525.652:4395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530525.662:4396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530525.662:4397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530525.663:4398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530525.681:4399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530525.681:4400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530525.690:4401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530525.690:4402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530525.691:4403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29509 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530525.741:4404): pid=29524 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530525.741:4405): pid=29524 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757367736D7A72666B78787475717476657479646D6862726D686F6D666B766F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303532352E35383138382D32393434332D3134363435313838363239373233372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530525.741:4406): pid=29524 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530525.743:4407): pid=29524 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530525.906:4408): pid=29524 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530525.906:4409): pid=29524 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530525.909:4410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530525.909:4411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530525.919:4412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530525.919:4413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530525.920:4414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29528 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530525.938:4415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530525.938:4416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.189:4417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.189:4418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.190:4419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530527.206:4420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.206:4421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.215:4422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.215:4423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.216:4424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530527.236:4425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.236:4426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.250:4427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.250:4428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.251:4429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530527.278:4430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.278:4431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.289:4432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.289:4433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.290:4434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29610 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530527.307:4435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.307:4436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.317:4437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.317:4438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.318:4439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29625 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530527.370:4440): pid=29640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530527.370:4441): pid=29640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6474726866796D747975667973736E6C6474776A6A7A6576766C787178647863203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303532372E3230383632372D32393535392D34343630343633323038353930332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530527.371:4442): pid=29640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530527.372:4443): pid=29640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530527.524:4444): pid=29640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530527.524:4445): pid=29640 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530527.526:4446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.526:4447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.536:4448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.536:4449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.537:4450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530527.557:4451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.557:4452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.791:4453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.791:4454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.792:4455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29663 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530527.809:4456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.809:4457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.818:4458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.818:4459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.819:4460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29677 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530527.839:4461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.839:4462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.855:4463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.855:4464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.856:4465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530527.884:4466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.884:4467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.894:4468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.894:4469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.894:4470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29712 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530527.913:4471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530527.913:4472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530527.922:4473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530527.922:4474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530527.923:4475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29727 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530527.972:4476): pid=29742 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530527.973:4477): pid=29742 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616476636E776C7A7070707A6D6D6C6F6E71646A7A6A79756579746A77676461203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303532372E383131333930342D32393636312D3236393835303733383830353939322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530527.973:4478): pid=29742 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530527.974:4479): pid=29742 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530528.146:4480): pid=29742 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530528.147:4481): pid=29742 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530528.149:4482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530528.149:4483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530528.159:4484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530528.159:4485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530528.160:4486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29746 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530528.178:4487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530528.178:4488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530528.479:4489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530528.479:4490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530528.479:4491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530528.497:4492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530528.497:4493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530528.506:4494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530528.506:4495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530528.507:4496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29777 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530528.527:4497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530528.527:4498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530528.673:4499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530528.673:4500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530528.674:4501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29798 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530528.704:4502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530528.704:4503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530528.714:4504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530528.714:4505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530528.715:4506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29812 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530528.733:4507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530528.733:4508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530528.743:4509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530528.744:4510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530528.745:4511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530528.799:4512): pid=29842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530528.799:4513): pid=29842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636F6666766D7A6A78786B72766375766866646272627A776E727476646E6A65203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303532382E343939303431382D32393736312D37343233383236323937373334362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530528.800:4514): pid=29842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530528.801:4515): pid=29842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530528.964:4516): pid=29842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530528.965:4517): pid=29842 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530528.967:4518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530528.967:4519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530528.977:4520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530528.977:4521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530528.977:4522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530528.996:4523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530528.996:4524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.181:4525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.181:4526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.182:4527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29862 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530529.200:4528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.200:4529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.209:4530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.209:4531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.210:4532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29876 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530529.231:4533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.231:4534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.244:4535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.244:4536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.245:4537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29897 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530529.273:4538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.273:4539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.283:4540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.283:4541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.284:4542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29911 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530529.316:4543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.316:4544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.331:4545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.331:4546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.332:4547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29926 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530529.381:4548): pid=29941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530529.381:4549): pid=29941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637A6662686774726C716366736C76736D74686876766B6A6B7A7870706F7474203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303532392E323032343132342D32393736312D3232363735373832303836363036322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530529.382:4550): pid=29941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530529.383:4551): pid=29941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530529.587:4552): pid=29941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530529.588:4553): pid=29941 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530529.590:4554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.590:4555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.600:4556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.600:4557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.601:4558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29945 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530529.625:4559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.625:4560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.808:4561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.808:4562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.809:4563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29960 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530529.826:4564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.826:4565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.837:4566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.837:4567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.838:4568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29974 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530529.860:4569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.860:4570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.875:4571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.875:4572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.876:4573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=29995 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530529.940:4574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.940:4575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530529.950:4576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530529.950:4577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530529.950:4578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530529.969:4579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530529.970:4580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530530.008:4581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530530.008:4582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530530.009:4583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30024 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530530.061:4584): pid=30039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530530.061:4585): pid=30039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7565657762667470716F6162626E7464746B6962796E6D7A726876677777756F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303532392E383238363030342D32393736312D3230303431303138353132333139342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530530.061:4586): pid=30039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530530.063:4587): pid=30039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530530.252:4588): pid=30039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530530.252:4589): pid=30039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530530.255:4590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530530.255:4591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530530.264:4592): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530530.264:4593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530530.265:4594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30044 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530530.285:4595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530530.285:4596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530530.464:4597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530530.464:4598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530530.465:4599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30060 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530530.484:4600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530530.484:4601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530530.493:4602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530530.493:4603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530530.493:4604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30074 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530530.514:4605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530530.514:4606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530530.528:4607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530530.528:4608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530530.529:4609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530530.559:4610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530530.559:4611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530530.569:4612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530530.569:4613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530530.570:4614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530530.589:4615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530530.589:4616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530530.599:4617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530530.600:4618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530530.600:4619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530530.652:4620): pid=30139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530530.652:4621): pid=30139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68736F7268736462756D6F646B6377686E6D73706A716E7472696F6372777074203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533302E343835373232382D32393736312D3232303230303630313834333633382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530530.653:4622): pid=30139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530530.654:4623): pid=30139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530530.932:4624): pid=30139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530530.932:4625): pid=30139 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530530.958:4626): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530530.958:4627): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530530.958:4628): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530530.958:4629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530530.959:4630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30143 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530530.978:4631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530530.978:4632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.194:4633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.194:4634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.195:4635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30159 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530531.212:4636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.212:4637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.222:4638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.222:4639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.223:4640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30173 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530531.250:4641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.250:4642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.274:4643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.274:4644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.274:4645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530531.319:4646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.319:4647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.330:4648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.330:4649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.331:4650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30208 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530531.348:4651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.349:4652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.359:4653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.359:4654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.359:4655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530531.410:4656): pid=30238 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530531.410:4657): pid=30238 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77736D6764716D626E756665706579766F686C65656B68676A61616C65796372203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533312E323134323630362D32393736312D31303834373736313039393530332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530531.410:4658): pid=30238 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530531.412:4659): pid=30238 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530531.640:4660): pid=30238 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530531.641:4661): pid=30238 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530531.644:4662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.644:4663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.654:4664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.654:4665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.655:4666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30242 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530531.673:4667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.673:4668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.862:4669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.862:4670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.863:4671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530531.882:4672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.882:4673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.891:4674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.891:4675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.892:4676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530531.913:4677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.913:4678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.928:4679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.928:4680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.928:4681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30292 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530531.957:4682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.957:4683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.967:4684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.967:4685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.968:4686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30306 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530531.986:4687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530531.986:4688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530531.998:4689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530531.998:4690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530531.999:4691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30321 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530532.050:4692): pid=30336 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530532.050:4693): pid=30336 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69706667756F64786F797A6C66767A6D617A6778726D72696A6A716367767177203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533312E3838343034332D32393736312D34323135353132303039353732362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530532.050:4694): pid=30336 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530532.051:4695): pid=30336 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530532.283:4696): pid=30336 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530532.283:4697): pid=30336 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530532.285:4698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530532.285:4699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530532.295:4700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530532.295:4701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530532.296:4702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30340 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530532.315:4703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530532.315:4704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530532.502:4705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530532.502:4706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530532.503:4707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30355 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530532.520:4708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530532.520:4709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530532.529:4710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530532.529:4711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530532.530:4712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30369 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530532.550:4713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530532.550:4714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530532.566:4715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530532.566:4716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530532.567:4717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30390 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530532.594:4718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530532.594:4719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530532.603:4720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530532.603:4721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530532.604:4722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30404 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530532.622:4723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530532.622:4724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530532.632:4725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530532.632:4726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530532.633:4727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530532.682:4728): pid=30434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530532.682:4729): pid=30434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B62736371646B7073736F72676A65706F6867666577696B776E676E787773203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533322E353231383837352D32393736312D3232343431363337373834343438342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530532.683:4730): pid=30434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530532.684:4731): pid=30434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530532.836:4732): pid=30434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530532.836:4733): pid=30434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530532.838:4734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530532.838:4735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530532.848:4736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530532.848:4737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530532.849:4738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30438 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530532.868:4739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530532.868:4740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.050:4741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.051:4742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.051:4743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30453 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.069:4744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.069:4745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.079:4746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.079:4747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.080:4748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30467 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.100:4749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.100:4750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.114:4751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.114:4752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.115:4753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30488 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.143:4754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.143:4755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.154:4756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.154:4757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.154:4758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30502 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.172:4759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.172:4760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.182:4761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.182:4762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.183:4763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30517 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530533.232:4764): pid=30532 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530533.232:4765): pid=30532 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7369676E696F6E736366667161646177716879656E75777075646865616674203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533332E3037313133392D32393736312D3232303135323834393432363936332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530533.232:4766): pid=30532 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530533.234:4767): pid=30532 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530533.386:4768): pid=30532 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530533.386:4769): pid=30532 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530533.389:4770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.389:4771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.398:4772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.398:4773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.399:4774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30536 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.417:4775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.417:4776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.598:4777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.598:4778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.599:4779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.616:4780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.616:4781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.625:4782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.625:4783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.626:4784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30565 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.646:4785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.646:4786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.660:4787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.660:4788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.661:4789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.688:4790): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.688:4791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.698:4792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.698:4793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.699:4794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30600 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.716:4795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.716:4796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.725:4797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.725:4798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.726:4799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530533.776:4800): pid=30630 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530533.776:4801): pid=30630 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77637064696E7266666566666F62647473736D6C6C7173646165757A77687875203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533332E363137393939332D32393736312D33353537343134363032373738332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530533.776:4802): pid=30630 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530533.778:4803): pid=30630 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530533.934:4804): pid=30630 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530533.935:4805): pid=30630 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530533.937:4806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.937:4807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530533.948:4808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530533.948:4809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530533.949:4810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30634 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530533.967:4811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530533.967:4812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.153:4813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.153:4814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.153:4815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30649 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530534.172:4816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.172:4817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.182:4818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.182:4819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.183:4820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30663 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530534.206:4821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.206:4822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.222:4823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.222:4824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.222:4825): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30684 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530534.253:4826): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.253:4827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.263:4828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.263:4829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.264:4830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530534.282:4831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.282:4832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.294:4833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.294:4834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.295:4835): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30713 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530534.345:4836): pid=30728 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530534.346:4837): pid=30728 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766E66776465666571706B7472697A6E75706572687762677A79647564696C65203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533342E313734363439372D32393736312D3135373332323534353038373231392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530534.346:4838): pid=30728 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530534.347:4839): pid=30728 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530534.510:4840): pid=30728 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530534.510:4841): pid=30728 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530534.513:4842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.513:4843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.523:4844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.523:4845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.524:4846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30732 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530534.542:4847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.542:4848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.743:4849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.743:4850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.745:4851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30747 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530534.763:4852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.763:4853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.772:4854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.772:4855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.773:4856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30761 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530534.794:4857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.794:4858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.807:4859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.807:4860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.808:4861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30782 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530534.836:4862): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.836:4863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.846:4864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.846:4865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.846:4866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530534.864:4867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530534.864:4868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530534.874:4869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530534.874:4870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530534.875:4871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530534.925:4872): pid=30826 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530534.925:4873): pid=30826 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C667375646A6E75727768747072616C6D6F757A6E7363766D6B797663656B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533342E373634373632322D32393736312D3139313836393634353235373631302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530534.926:4874): pid=30826 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530534.927:4875): pid=30826 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530535.096:4876): pid=30826 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530535.096:4877): pid=30826 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530535.099:4878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530535.099:4879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530535.108:4880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530535.108:4881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530535.109:4882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30830 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530535.127:4883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530535.127:4884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530535.322:4885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530535.322:4886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530535.323:4887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30845 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530535.342:4888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530535.342:4889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530535.354:4890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530535.354:4891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530535.354:4892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530535.377:4893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530535.377:4894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530535.392:4895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530535.392:4896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530535.393:4897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30880 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530535.420:4898): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530535.420:4899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530535.432:4900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530535.432:4901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530535.433:4902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30894 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530535.452:4903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530535.452:4904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530535.463:4905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530535.463:4906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530535.464:4907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30909 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530535.517:4908): pid=30924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530535.517:4909): pid=30924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F61767475707375676E77726E69777572707771726667736C6B667662676E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533352E333434323535342D32393736312D3139353136323931363339393838392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530535.517:4910): pid=30924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530535.518:4911): pid=30924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530535.672:4912): pid=30924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530535.672:4913): pid=30924 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530535.674:4914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530535.674:4915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530535.685:4916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530535.685:4917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530535.686:4918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30928 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530535.704:4919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530535.705:4920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530535.950:4921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530535.950:4922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530535.951:4923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30943 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530535.969:4924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530535.969:4925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530535.978:4926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530535.978:4927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530535.979:4928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30957 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530536.001:4929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.001:4930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.016:4931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.016:4932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.017:4933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530536.046:4934): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.046:4935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.056:4936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.056:4937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.057:4938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=30992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530536.075:4939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.075:4940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.086:4941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.086:4942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.087:4943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31007 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530536.138:4944): pid=31022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530536.138:4945): pid=31022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79737A7669736C697470696C716A70686171656E6A64686A676A696477726C66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533352E3937313435372D32393736312D3131363233393631393935313931302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530536.138:4946): pid=31022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530536.140:4947): pid=31022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530536.307:4948): pid=31022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530536.307:4949): pid=31022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530536.309:4950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.309:4951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.319:4952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.319:4953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.320:4954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31026 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530536.340:4955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.340:4956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.524:4957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.524:4958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.525:4959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530536.541:4960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.541:4961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.550:4962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.550:4963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.551:4964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31055 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530536.571:4965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.571:4966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.584:4967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.584:4968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.585:4969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530536.612:4970): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.612:4971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.622:4972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.622:4973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.623:4974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31090 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530536.640:4975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.640:4976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.649:4977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.649:4978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.650:4979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530536.699:4980): pid=31120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530536.700:4981): pid=31120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6477796373657972666865656A6B69666674656A77796C7A73647168726C6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533362E3534333034362D32393736312D3134323634383930323935363737302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530536.700:4982): pid=31120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530536.701:4983): pid=31120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530536.869:4984): pid=31120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530536.869:4985): pid=31120 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530536.871:4986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.871:4987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530536.881:4988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530536.881:4989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530536.882:4990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530536.899:4991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530536.899:4992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.101:4993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.101:4994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.102:4995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530537.119:4996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.119:4997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.129:4998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.129:4999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.129:5000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31153 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530537.150:5001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.150:5002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.164:5003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.164:5004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.165:5005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31174 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530537.193:5006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.193:5007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.202:5008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.202:5009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.203:5010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530537.221:5011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.221:5012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.231:5013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.231:5014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.232:5015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530537.282:5016): pid=31218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530537.282:5017): pid=31218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A6F7168656D62696D646E6877776D62776374657A6367616D7571796A7164203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533372E313231323632362D32393736312D39353734393931393439323635382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530537.283:5018): pid=31218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530537.284:5019): pid=31218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530537.447:5020): pid=31218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530537.447:5021): pid=31218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530537.449:5022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.449:5023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.459:5024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.459:5025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.460:5026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31222 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530537.478:5027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.478:5028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.660:5029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.660:5030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.661:5031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530537.678:5032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.678:5033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.687:5034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.687:5035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.688:5036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530537.708:5037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.708:5038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.721:5039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.721:5040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.722:5041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530537.748:5042): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.748:5043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.758:5044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.758:5045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.759:5046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530537.776:5047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.777:5048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530537.786:5049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530537.786:5050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530537.787:5051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31301 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530537.838:5052): pid=31316 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530537.838:5053): pid=31316 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6976736C70737073707A64746D696B6B6F616D657475616D636177706A6476203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533372E363830303035332D32393736312D3131353436343236333430373130352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530537.839:5054): pid=31316 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530537.841:5055): pid=31316 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530537.995:5056): pid=31316 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530537.995:5057): pid=31316 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530537.997:5058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530537.997:5059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.008:5060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.008:5061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.009:5062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31320 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.027:5063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.027:5064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.227:5065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.227:5066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.228:5067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.244:5068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.244:5069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.253:5070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.253:5071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.254:5072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31349 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.275:5073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.275:5074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.289:5075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.289:5076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.289:5077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31370 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.317:5078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.317:5079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.328:5080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.328:5081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.328:5082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.346:5083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.346:5084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.355:5085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.355:5086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.356:5087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31399 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530538.406:5088): pid=31414 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530538.407:5089): pid=31414 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71717567676E767271786A61657877706961627963737073666C6F7073687668203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533382E323436353032392D32393736312D3132393031363633323437303138312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530538.407:5090): pid=31414 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530538.408:5091): pid=31414 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530538.561:5092): pid=31414 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530538.562:5093): pid=31414 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530538.564:5094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.564:5095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.573:5096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.573:5097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.574:5098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.593:5099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.593:5100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.782:5101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.782:5102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.783:5103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31433 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.800:5104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.800:5105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.809:5106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.809:5107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.810:5108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31447 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.830:5109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.831:5110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.844:5111): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.844:5112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.845:5113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31468 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.873:5114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.873:5115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.884:5116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.884:5117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.884:5118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31482 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530538.902:5119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530538.902:5120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530538.912:5121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530538.912:5122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530538.913:5123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31497 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530538.965:5124): pid=31512 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530538.966:5125): pid=31512 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6275787A776A686E6A6F6279616475686C6A7368796D71626D6F78756A7A6270203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533382E383032303230352D32393736312D3139383433313236373930383038342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530538.966:5126): pid=31512 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530538.967:5127): pid=31512 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530539.133:5128): pid=31512 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530539.133:5129): pid=31512 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530539.136:5130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.136:5131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530539.146:5132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530539.146:5133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530539.146:5134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31516 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530539.166:5135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.166:5136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530539.355:5137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530539.355:5138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530539.356:5139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530539.373:5140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.373:5141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530539.382:5142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530539.382:5143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530539.383:5144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31545 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530539.407:5145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.407:5146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530539.420:5147): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530539.420:5148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530539.421:5149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530539.448:5150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.448:5151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530539.457:5152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530539.457:5153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530539.458:5154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31580 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530539.476:5155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.476:5156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530539.485:5157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530539.485:5158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530539.486:5159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31595 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530539.536:5160): pid=31610 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530539.536:5161): pid=31610 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76706B6B6579786D71746B7361686D616C68786C66756170796B6A706D747763203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533392E3337353332342D32393736312D3137363339363830303532363939342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530539.536:5162): pid=31610 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530539.538:5163): pid=31610 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530539.710:5164): pid=31610 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530539.710:5165): pid=31610 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530539.712:5166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.712:5167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530539.723:5168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530539.723:5169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530539.723:5170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31614 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530539.742:5171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.742:5172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530539.926:5173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530539.926:5174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530539.927:5175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31629 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530539.949:5176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.949:5177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530539.960:5178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530539.960:5179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530539.960:5180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31643 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530539.984:5181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530539.984:5182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.001:5183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.002:5184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.003:5185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31664 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530540.035:5186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.035:5187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.045:5188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.045:5189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.046:5190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31678 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530540.067:5191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.067:5192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.078:5193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.078:5194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.079:5195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530540.135:5196): pid=31708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530540.135:5197): pid=31708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C627078656266727366707572776A7A7564626F6472797274796E6666727064203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303533392E3935313431392D32393736312D3138353235303931343137333933332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530540.135:5198): pid=31708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530540.137:5199): pid=31708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530540.288:5200): pid=31708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530540.288:5201): pid=31708 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530540.290:5202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.290:5203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.300:5204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.300:5205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.301:5206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31712 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530540.318:5207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.318:5208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.496:5209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.496:5210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.497:5211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31727 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530540.514:5212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.514:5213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.523:5214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.523:5215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.524:5216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31741 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530540.545:5217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.545:5218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.559:5219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.559:5220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.560:5221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31762 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530540.587:5222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.587:5223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.597:5224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.597:5225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.598:5226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31776 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530540.616:5227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.616:5228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.625:5229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.626:5230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.626:5231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31791 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530540.676:5232): pid=31806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530540.676:5233): pid=31806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A67697771756270666D78746E72736D6A7A7673726C6F636B64796465727066203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534302E353135393139342D32393736312D3235353637373537323839393532382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530540.677:5234): pid=31806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530540.678:5235): pid=31806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530540.830:5236): pid=31806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530540.831:5237): pid=31806 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530540.833:5238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.833:5239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530540.844:5240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530540.844:5241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530540.845:5242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530540.863:5243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530540.863:5244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.088:5245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.088:5246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.089:5247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31825 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530541.108:5248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.108:5249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.117:5250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.117:5251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.118:5252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31839 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530541.140:5253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.140:5254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.154:5255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.154:5256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.155:5257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530541.184:5258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.184:5259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.193:5260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.194:5261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.194:5262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31874 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530541.214:5263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.214:5264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.224:5265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.224:5266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.225:5267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530541.277:5268): pid=31904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530541.277:5269): pid=31904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747369677A6D7063797565696D6A70776676786A656E6A65736E64696E787761203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534312E313130303133322D32393736312D3137323734373738323239373630352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530541.278:5270): pid=31904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530541.279:5271): pid=31904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530541.434:5272): pid=31904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530541.434:5273): pid=31904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530541.437:5274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.437:5275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.446:5276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.446:5277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.447:5278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31908 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530541.466:5279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.466:5280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.673:5281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.673:5282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.673:5283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31923 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530541.692:5284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.692:5285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.701:5286): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.701:5287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.702:5288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31937 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530541.724:5289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.725:5290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.738:5291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.738:5292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.739:5293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31958 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530541.766:5294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.766:5295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.777:5296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.777:5297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.778:5298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31972 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530541.795:5299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530541.795:5300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530541.807:5301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530541.807:5302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530541.808:5303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=31987 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530541.859:5304): pid=32002 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530541.859:5305): pid=32002 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747071757063666265627874767A6A74637A7477676172766A746A6E63757364203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534312E363934343335362D32393736312D31303939323037383037383934382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530541.860:5306): pid=32002 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530541.861:5307): pid=32002 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530542.014:5308): pid=32002 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530542.014:5309): pid=32002 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530542.017:5310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.017:5311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.026:5312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.026:5313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.027:5314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32006 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.045:5315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.045:5316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.228:5317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.228:5318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.229:5319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32021 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.246:5320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.246:5321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.255:5322): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.255:5323): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.256:5324): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32035 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.276:5325): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.276:5326): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.290:5327): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.290:5328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.291:5329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32056 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.318:5330): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.318:5331): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.328:5332): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.328:5333): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.328:5334): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32070 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.346:5335): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.346:5336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.355:5337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.355:5338): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.356:5339): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32085 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530542.406:5340): pid=32100 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530542.406:5341): pid=32100 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E69747572697A696B706D6A7662776E777163747769746B7A63666878617975203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534322E323438303038332D32393736312D3234393534333834363338363636342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530542.406:5342): pid=32100 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530542.407:5343): pid=32100 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530542.559:5344): pid=32100 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530542.559:5345): pid=32100 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530542.561:5346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.561:5347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.571:5348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.571:5349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.572:5350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32104 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.590:5351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.590:5352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.771:5353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.771:5354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.772:5355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32119 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.790:5356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.790:5357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.799:5358): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.799:5359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.800:5360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32133 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.820:5361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.820:5362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.834:5363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.834:5364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.834:5365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32154 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.864:5366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.864:5367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.874:5368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.874:5369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.875:5370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32168 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530542.894:5371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530542.894:5372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530542.906:5373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530542.906:5374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530542.907:5375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32183 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530542.958:5376): pid=32198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530542.958:5377): pid=32198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6273736B6867706362746D636B7968657070656C6C6B666F6F76787574716876203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534322E373932323032352D32393736312D31383230313739353931313438372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530542.959:5378): pid=32198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530542.960:5379): pid=32198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530543.114:5380): pid=32198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530543.114:5381): pid=32198 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530543.116:5382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.116:5383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.128:5384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.128:5385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.129:5386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530543.146:5387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.146:5388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.366:5389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.366:5390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.367:5391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530543.386:5392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.386:5393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.397:5394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.397:5395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.398:5396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32231 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530543.418:5397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.418:5398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.434:5399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.434:5400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.435:5401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32252 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530543.468:5402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.468:5403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.480:5404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.480:5405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.481:5406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32266 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530543.499:5407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.499:5408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.510:5409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.510:5410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.511:5411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32281 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530543.561:5412): pid=32296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530543.561:5413): pid=32296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746D79696F6E637077616679646C6D74696C7078677A73747874626466756865203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534332E333838353134332D32393736312D3132333834353433323134383133382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530543.562:5414): pid=32296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530543.563:5415): pid=32296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530543.715:5416): pid=32296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530543.715:5417): pid=32296 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530543.717:5418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.717:5419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.727:5420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.727:5421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.728:5422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530543.746:5423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.746:5424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.932:5425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.932:5426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.933:5427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32315 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530543.950:5428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.950:5429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.961:5430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.961:5431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.961:5432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32329 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530543.983:5433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530543.983:5434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530543.998:5435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530543.998:5436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530543.999:5437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32350 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530544.026:5438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.026:5439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530544.036:5440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530544.036:5441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530544.036:5442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32364 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530544.054:5443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.054:5444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530544.064:5445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530544.064:5446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530544.065:5447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32379 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530544.115:5448): pid=32394 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530544.115:5449): pid=32394 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74776174787261667A7A666C76667577766F797475777062646E646D6F616779203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534332E3935323736332D32393736312D35323430333036303338383132322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530544.116:5450): pid=32394 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530544.117:5451): pid=32394 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530544.273:5452): pid=32394 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530544.273:5453): pid=32394 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530544.276:5454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.276:5455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530544.285:5456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530544.285:5457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530544.286:5458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530544.304:5459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.304:5460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530544.481:5461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530544.481:5462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530544.482:5463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32413 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530544.498:5464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.498:5465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530544.508:5466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530544.508:5467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530544.509:5468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32427 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530544.529:5469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.529:5470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530544.543:5471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530544.543:5472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530544.544:5473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32448 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530544.570:5474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.570:5475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530544.580:5476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530544.580:5477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530544.581:5478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32462 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530544.599:5479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.599:5480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530544.609:5481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530544.609:5482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530544.610:5483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32477 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530544.660:5484): pid=32492 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530544.660:5485): pid=32492 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716C796775676C69727777716C616C65647871686E6D677568636A6266647265203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534342E353030353130372D32393736312D3135313832353335363739333330382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530544.660:5486): pid=32492 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530544.661:5487): pid=32492 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530544.818:5488): pid=32492 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530544.818:5489): pid=32492 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530544.820:5490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.820:5491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530544.831:5492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530544.831:5493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530544.832:5494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530544.850:5495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530544.850:5496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.055:5497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.055:5498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.056:5499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.073:5500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.073:5501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.083:5502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.083:5503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.084:5504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32525 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.105:5505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.105:5506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.119:5507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.119:5508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.120:5509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32546 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.148:5510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.148:5511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.158:5512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.158:5513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.159:5514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32560 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.178:5515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.178:5516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.188:5517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.188:5518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.188:5519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530545.245:5520): pid=32590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530545.245:5521): pid=32590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A656C73796C656B69676569647771666F6D6D6B6A78636477716C7471617676203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534352E303735343637362D32393736312D3233333539323234343636393233312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530545.246:5522): pid=32590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530545.247:5523): pid=32590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530545.395:5524): pid=32590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530545.396:5525): pid=32590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530545.398:5526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.398:5527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.407:5528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.407:5529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.408:5530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32594 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.426:5531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.426:5532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.605:5533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.605:5534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.606:5535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32611 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.624:5536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.624:5537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.633:5538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.633:5539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.634:5540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32625 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.656:5541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.656:5542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.671:5543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.671:5544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.672:5545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32646 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.701:5546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.701:5547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.711:5548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.711:5549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.712:5550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.731:5551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.731:5552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.741:5553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.741:5554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.742:5555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32675 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530545.791:5556): pid=32690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530545.791:5557): pid=32690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A776E76677476636769707865646A70736E7969697978726D6D79796A676464203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534352E363236303138382D32393736312D3234343937303630303130383436312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530545.792:5558): pid=32690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530545.793:5559): pid=32690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530545.944:5560): pid=32690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530545.944:5561): pid=32690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530545.946:5562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.947:5563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530545.956:5564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530545.956:5565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530545.957:5566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32694 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530545.975:5567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530545.975:5568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.360:5569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.360:5570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.361:5571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32714 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530546.378:5572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530546.378:5573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.387:5574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.387:5575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.388:5576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32728 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530546.408:5577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530546.408:5578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.521:5579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.521:5580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.522:5581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32749 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530546.548:5582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530546.548:5583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.558:5584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.558:5585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.559:5586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530546.576:5587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530546.576:5588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.585:5589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.585:5590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.586:5591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530546.635:5592): pid=32793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530546.636:5593): pid=32793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777077766D6B7173756E6E7561656B6A6361696A6177616B6972616F62646379203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534362E333830303635322D33323731322D36383238313736383734323637342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530546.636:5594): pid=32793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530546.637:5595): pid=32793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530546.780:5596): pid=32793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530546.780:5597): pid=32793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530546.782:5598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530546.782:5599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.795:5600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.795:5601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.796:5602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32798 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530546.815:5603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530546.815:5604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.825:5605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.825:5606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.826:5607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32812 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530546.845:5608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530546.845:5609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.861:5610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.861:5611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.862:5612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530546.889:5613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530546.889:5614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.899:5615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.899:5616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.900:5617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32842 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530546.917:5618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530546.917:5619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530546.927:5620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530546.927:5621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530546.928:5622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32857 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530546.979:5623): pid=32872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530546.979:5624): pid=32872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69736A6F6278787172686F6D6374757675686D71727A776A79726C6B6C66666E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534362E333830303635322D33323731322D36383238313736383734323637342F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530546.979:5625): pid=32872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530546.981:5626): pid=32872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530547.155:5627): pid=32872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530547.156:5628): pid=32872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530547.158:5629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530547.158:5630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530547.168:5631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530547.168:5632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530547.169:5633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32876 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530547.188:5634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530547.188:5635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530547.410:5636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530547.410:5637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530547.411:5638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32893 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530547.428:5639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530547.428:5640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530547.437:5641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530547.437:5642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530547.438:5643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530547.458:5644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530547.458:5645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530547.472:5646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530547.472:5647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530547.473:5648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32928 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530547.501:5649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530547.501:5650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530547.511:5651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530547.511:5652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530547.512:5653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32942 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530547.530:5654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530547.530:5655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530547.541:5656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530547.541:5657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530547.542:5658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=32957 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530547.591:5659): pid=32972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530547.591:5660): pid=32972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716778646B74636E626A616A6C63666A68707670676E757677766A6E616F7763203B2068747470735F70726F78793D272720687474705F70726F78793D272720444F434B45525F434C49454E545F54494D454F55543D31323020434F4D504F53455F485454505F54494D454F55543D313230202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534372E343330333530332D33323839312D3234313133393836353538353535382F416E736962616C6C5A5F646F636B65725F636F6D706F73652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530547.591:5661): pid=32972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530547.593:5662): pid=32972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530548.493:5663): prog-id=269 op=LOAD
type=BPF msg=audit(1748530548.493:5664): prog-id=270 op=LOAD
type=SYSCALL msg=audit(1748530548.493:5664): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=33018 pid=33046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.493:5664): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393361306430636436616162353761663331353766333765
type=BPF msg=audit(1748530548.494:5665): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.494:5666): prog-id=271 op=LOAD
type=SYSCALL msg=audit(1748530548.494:5666): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=33018 pid=33046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.494:5666): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393361306430636436616162353761663331353766333765
type=BPF msg=audit(1748530548.494:5667): prog-id=272 op=LOAD
type=SYSCALL msg=audit(1748530548.494:5667): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=33018 pid=33046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.494:5667): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393361306430636436616162353761663331353766333765
type=BPF msg=audit(1748530548.494:5668): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.494:5669): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.494:5670): prog-id=273 op=LOAD
type=SYSCALL msg=audit(1748530548.494:5670): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=33018 pid=33046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.494:5670): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393361306430636436616162353761663331353766333765
type=BPF msg=audit(1748530548.497:5671): prog-id=274 op=LOAD
type=BPF msg=audit(1748530548.498:5672): prog-id=275 op=LOAD
type=SYSCALL msg=audit(1748530548.498:5672): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=33030 pid=33063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.498:5672): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33633236346334386530356264653261653638636235643934
type=BPF msg=audit(1748530548.498:5673): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.498:5674): prog-id=276 op=LOAD
type=SYSCALL msg=audit(1748530548.498:5674): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=33030 pid=33063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.498:5674): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33633236346334386530356264653261653638636235643934
type=BPF msg=audit(1748530548.499:5675): prog-id=277 op=LOAD
type=SYSCALL msg=audit(1748530548.499:5675): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=33030 pid=33063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.499:5675): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33633236346334386530356264653261653638636235643934
type=BPF msg=audit(1748530548.499:5676): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.499:5677): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.499:5678): prog-id=278 op=LOAD
type=SYSCALL msg=audit(1748530548.499:5678): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=33030 pid=33063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.499:5678): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33633236346334386530356264653261653638636235643934
type=BPF msg=audit(1748530548.515:5679): prog-id=279 op=LOAD
type=SYSCALL msg=audit(1748530548.515:5679): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=33042 pid=33083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.515:5679): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66326134323266636530613830623938626236333133333334
type=BPF msg=audit(1748530548.515:5680): prog-id=280 op=LOAD
type=SYSCALL msg=audit(1748530548.515:5680): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=33042 pid=33083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.515:5680): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66326134323266636530613830623938626236333133333334
type=BPF msg=audit(1748530548.515:5681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.515:5682): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.515:5683): prog-id=281 op=LOAD
type=SYSCALL msg=audit(1748530548.515:5683): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=33042 pid=33083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.515:5683): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66326134323266636530613830623938626236333133333334
type=BPF msg=audit(1748530548.699:5684): prog-id=282 op=LOAD
type=BPF msg=audit(1748530548.699:5685): prog-id=283 op=LOAD
type=SYSCALL msg=audit(1748530548.699:5685): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00023bad0 a2=90 a3=0 items=0 ppid=33357 pid=33382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.699:5685): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313733366436626136656132323438313463666538663434
type=BPF msg=audit(1748530548.700:5686): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.700:5687): prog-id=284 op=LOAD
type=SYSCALL msg=audit(1748530548.700:5687): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00023bc48 a2=90 a3=0 items=0 ppid=33357 pid=33382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.700:5687): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313733366436626136656132323438313463666538663434
type=BPF msg=audit(1748530548.700:5688): prog-id=285 op=LOAD
type=SYSCALL msg=audit(1748530548.700:5688): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00023b9d8 a2=90 a3=0 items=0 ppid=33357 pid=33382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.700:5688): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313733366436626136656132323438313463666538663434
type=BPF msg=audit(1748530548.700:5689): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.700:5690): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.700:5691): prog-id=286 op=LOAD
type=SYSCALL msg=audit(1748530548.700:5691): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00023beb0 a2=90 a3=0 items=0 ppid=33357 pid=33382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.700:5691): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313733366436626136656132323438313463666538663434
type=BPF msg=audit(1748530548.762:5692): prog-id=287 op=LOAD
type=BPF msg=audit(1748530548.763:5693): prog-id=288 op=LOAD
type=SYSCALL msg=audit(1748530548.763:5693): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0002b7ad0 a2=90 a3=0 items=0 ppid=33491 pid=33528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.763:5693): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33366635333065343963333238323962376234373162653436
type=BPF msg=audit(1748530548.763:5694): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.763:5695): prog-id=289 op=LOAD
type=SYSCALL msg=audit(1748530548.763:5695): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0002b7c48 a2=90 a3=0 items=0 ppid=33491 pid=33528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.763:5695): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33366635333065343963333238323962376234373162653436
type=BPF msg=audit(1748530548.763:5696): prog-id=290 op=LOAD
type=SYSCALL msg=audit(1748530548.763:5696): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002b79d8 a2=90 a3=0 items=0 ppid=33491 pid=33528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.763:5696): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33366635333065343963333238323962376234373162653436
type=BPF msg=audit(1748530548.763:5697): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.764:5698): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.764:5699): prog-id=291 op=LOAD
type=SYSCALL msg=audit(1748530548.764:5699): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0002b7eb0 a2=90 a3=0 items=0 ppid=33491 pid=33528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.764:5699): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33366635333065343963333238323962376234373162653436
type=BPF msg=audit(1748530548.776:5700): prog-id=292 op=LOAD
type=BPF msg=audit(1748530548.777:5701): prog-id=293 op=LOAD
type=SYSCALL msg=audit(1748530548.777:5701): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019dad0 a2=90 a3=0 items=0 ppid=33487 pid=33531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.777:5701): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643539383430356130376236336338626530376237633166
type=BPF msg=audit(1748530548.777:5702): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.777:5703): prog-id=294 op=LOAD
type=SYSCALL msg=audit(1748530548.777:5703): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019dc48 a2=90 a3=0 items=0 ppid=33487 pid=33531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.777:5703): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643539383430356130376236336338626530376237633166
type=BPF msg=audit(1748530548.777:5704): prog-id=295 op=LOAD
type=SYSCALL msg=audit(1748530548.777:5704): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019d9d8 a2=90 a3=0 items=0 ppid=33487 pid=33531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.777:5704): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643539383430356130376236336338626530376237633166
type=BPF msg=audit(1748530548.777:5705): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.777:5706): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530548.777:5707): prog-id=296 op=LOAD
type=SYSCALL msg=audit(1748530548.777:5707): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019deb0 a2=90 a3=0 items=0 ppid=33487 pid=33531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530548.777:5707): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643539383430356130376236336338626530376237633166
type=USER_END msg=audit(1748530548.936:5708): pid=32972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530548.936:5709): pid=32972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530548.939:5710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530548.939:5711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530548.951:5712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530548.951:5713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530548.953:5714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=33990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530548.977:5715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530548.977:5716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=BPF msg=audit(1748530549.139:5717): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1748530549.509:5718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530549.509:5719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530549.510:5720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34389 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530549.541:5721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530549.541:5722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530549.550:5723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530549.550:5724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530549.555:5725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34451 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530549.583:5726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530549.583:5727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530549.600:5728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530549.600:5729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530549.604:5730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530549.642:5731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530549.642:5732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530549.653:5733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530549.654:5734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530549.657:5735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530549.689:5736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530549.689:5737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530549.699:5738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530549.699:5739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530549.701:5740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34605 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530549.770:5741): pid=34636 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530549.770:5742): pid=34636 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F716C77667369666E76756C6F636272656378626B74767166756E706A7072203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303534392E3534333430392D33343232342D3233313333393232343534363130322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530549.771:5743): pid=34636 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530549.773:5744): pid=34636 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530550.084:5745): pid=34636 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530550.084:5746): pid=34636 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530550.087:5747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530550.087:5748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530550.100:5749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530550.100:5750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530550.101:5751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530550.140:5752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530550.140:5753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530550.377:5754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530550.377:5755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530550.378:5756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34792 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530550.397:5757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530550.397:5758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530550.406:5759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530550.406:5760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530550.407:5761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530550.428:5762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530550.428:5763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530550.441:5764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530550.441:5765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530550.442:5766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34831 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530550.488:5767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530550.488:5768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530550.501:5769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530550.501:5770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530550.502:5771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34845 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530550.539:5772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530550.539:5773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530550.551:5774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530550.551:5775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530550.554:5776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530550.624:5777): pid=34882 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530550.624:5778): pid=34882 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F726968696F78626F6D6963636B737363766A6C6965756F6F6D7377636C756C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303535302E333938353034332D33343232342D3236353333373532393937353132382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530550.624:5779): pid=34882 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530550.631:5780): pid=34882 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530550.939:5781): pid=34882 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530550.939:5782): pid=34882 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530550.941:5783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530550.941:5784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530550.953:5785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530550.953:5786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530550.954:5787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=34919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530550.988:5788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530550.988:5789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530551.231:5790): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530551.231:5791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530551.232:5792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35049 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530551.249:5793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530551.250:5794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530551.258:5795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530551.258:5796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530551.261:5797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35064 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530551.289:5798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530551.289:5799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530551.303:5800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530551.303:5801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530551.304:5802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35085 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530551.335:5803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530551.336:5804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530551.346:5805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530551.346:5806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530551.348:5807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530551.374:5808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530551.374:5809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530551.385:5810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530551.385:5811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530551.387:5812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35131 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530551.438:5813): pid=35146 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530551.438:5814): pid=35146 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716E656A6D6666766C656372656D7078646A6B627762666A7377686D6A6F6774203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303535312E3235313338362D33343232342D3234343234363439323537373733312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530551.439:5815): pid=35146 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530551.440:5816): pid=35146 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530555.443:5817): pid=35146 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530555.443:5818): pid=35146 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530555.445:5819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530555.445:5820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530555.456:5821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530555.456:5822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530555.457:5823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35471 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530555.491:5824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530555.491:5825): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530555.729:5826): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530555.729:5827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530555.733:5828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35486 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530555.750:5829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530555.750:5830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530555.759:5831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530555.759:5832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530555.763:5833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530555.783:5834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530555.783:5835): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530555.802:5836): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530555.802:5837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530555.803:5838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35521 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530555.847:5839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530555.847:5840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530555.857:5841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530555.857:5842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530555.859:5843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35535 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530555.885:5844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530555.885:5845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530555.895:5846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530555.895:5847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530555.896:5848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530555.965:5849): pid=35565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530555.965:5850): pid=35565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6463716A736E7473766B686F766E7A72776C637161767275666C70656D67666C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303535352E373531393633312D33343232342D393830303837383832323130342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530555.966:5851): pid=35565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530555.970:5852): pid=35565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530556.857:5853): pid=35565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530556.857:5854): pid=35565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530556.860:5855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530556.860:5856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530556.871:5857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530556.872:5858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530556.872:5859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35706 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530556.891:5860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530556.891:5861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530557.144:5862): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530557.144:5863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530557.145:5864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35721 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530557.166:5865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530557.166:5866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530557.175:5867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530557.175:5868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530557.178:5869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35735 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530557.211:5870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530557.211:5871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530557.228:5872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530557.228:5873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530557.229:5874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530557.264:5875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530557.264:5876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530557.274:5877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530557.274:5878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530557.276:5879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35770 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530557.304:5880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530557.304:5881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530557.315:5882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530557.315:5883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530557.316:5884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530557.367:5885): pid=35800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530557.367:5886): pid=35800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75756F6C77656C76676C6A766A797772687966786379716A6375727A64786570203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303535372E313637373830392D33343232342D38373035353234343039343530332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530557.367:5887): pid=35800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530557.369:5888): pid=35800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530557.836:5889): pid=35800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530557.836:5890): pid=35800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530557.838:5891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530557.838:5892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530557.849:5893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530557.849:5894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530557.850:5895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530557.868:5896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530557.868:5897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530558.099:5898): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530558.099:5899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530558.100:5900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530558.123:5901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530558.123:5902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530558.133:5903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530558.133:5904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530558.134:5905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530558.159:5906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530558.159:5907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530558.175:5908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530558.175:5909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530558.175:5910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35965 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530558.208:5911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530558.208:5912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530558.219:5913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530558.219:5914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530558.220:5915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530558.244:5916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530558.244:5917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530558.255:5918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530558.255:5919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530558.256:5920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=35994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530558.308:5921): pid=36009 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530558.308:5922): pid=36009 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7166767461757A73636E746E73656A73657778676A73726C776D696A6B686A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303535382E3132343939332D33343232342D3136303036393031373135383039372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530558.309:5923): pid=36009 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530558.310:5924): pid=36009 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530569.734:5925): pid=36009 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530569.734:5926): pid=36009 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530569.737:5927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530569.737:5928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530569.746:5929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530569.746:5930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530569.747:5931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36347 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530569.765:5932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530569.765:5933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530570.010:5934): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530570.011:5935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530570.012:5936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36362 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530570.029:5937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530570.029:5938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530570.039:5939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530570.039:5940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530570.040:5941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36376 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530570.060:5942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530570.060:5943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530570.074:5944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530570.074:5945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530570.075:5946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36397 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530570.102:5947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530570.102:5948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530570.112:5949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530570.112:5950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530570.113:5951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530570.131:5952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530570.131:5953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530570.140:5954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530570.140:5955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530570.141:5956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36429 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530570.192:5957): pid=36444 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530570.193:5958): pid=36444 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637879767577617167636F6F7A6C6B6B6B6A666B72716B6E7263776970776C76203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537302E303331353939382D33343232342D3138323533323130383630393635372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530570.193:5959): pid=36444 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530570.195:5960): pid=36444 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530570.915:5961): pid=36444 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530570.916:5962): pid=36444 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530570.918:5963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530570.918:5964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530570.929:5965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530570.929:5966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530570.933:5967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36532 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530570.950:5968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530570.950:5969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530571.182:5970): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530571.182:5971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530571.183:5972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36547 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530571.200:5973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530571.200:5974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530571.213:5975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530571.213:5976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530571.216:5977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530571.250:5978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530571.250:5979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530571.266:5980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530571.266:5981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530571.267:5982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36582 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530571.298:5983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530571.298:5984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530571.309:5985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530571.309:5986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530571.310:5987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530571.330:5988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530571.330:5989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530571.340:5990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530571.340:5991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530571.341:5992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36611 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530571.392:5993): pid=36626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530571.393:5994): pid=36626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7868746A6A646B6F69756A6A766C6C6B69756F72696A71706663796A696A6C6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537312E32303139382D33343232342D38363935343538313833353138332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530571.393:5995): pid=36626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530571.395:5996): pid=36626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530571.661:5997): pid=36626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530571.661:5998): pid=36626 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530571.664:5999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530571.664:6000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530571.675:6001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530571.675:6002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530571.676:6003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530571.696:6004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530571.696:6005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530571.947:6006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530571.947:6007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530571.948:6008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36658 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530571.965:6009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530571.965:6010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530571.974:6011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530571.974:6012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530571.975:6013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36672 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530572.004:6014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.004:6015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530572.020:6016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530572.020:6017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530572.021:6018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530572.052:6019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.052:6020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530572.064:6021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530572.064:6022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530572.065:6023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530572.088:6024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.088:6025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530572.099:6026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530572.100:6027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530572.101:6028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36722 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530572.160:6029): pid=36737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530572.160:6030): pid=36737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6872756B6B676372766C786876706C636765637A707864696C70686168716462203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537312E393636393332352D33363635332D3131313435373234333334303438382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530572.160:6031): pid=36737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530572.162:6032): pid=36737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530572.328:6033): pid=36737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530572.329:6034): pid=36737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530572.331:6035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.331:6036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530572.341:6037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530572.341:6038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530572.342:6039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36741 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530572.362:6040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.362:6041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530572.609:6042): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530572.609:6043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530572.610:6044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36760 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530572.628:6045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.628:6046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530572.637:6047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530572.637:6048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530572.638:6049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36774 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530572.660:6050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.660:6051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530572.674:6052): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530572.674:6053): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530572.675:6054): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36795 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530572.704:6055): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.704:6056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530572.717:6057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530572.717:6058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530572.718:6059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36809 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530572.741:6060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.741:6061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530572.753:6062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530572.753:6063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530572.755:6064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36824 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530572.811:6065): pid=36839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530572.811:6066): pid=36839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62736867736970616B6C7977626C666F656E7A75616B796F73636E6877737173203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537322E363330313639322D33363735362D34323136333430393230333135322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530572.812:6067): pid=36839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530572.814:6068): pid=36839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530572.987:6069): pid=36839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530572.987:6070): pid=36839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530572.990:6071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530572.990:6072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530573.001:6073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530573.001:6074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530573.003:6075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530573.021:6076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530573.021:6077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530573.298:6078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530573.298:6079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530573.299:6080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530573.317:6081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530573.317:6082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530573.326:6083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530573.326:6084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530573.326:6085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530573.353:6086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530573.353:6087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530573.367:6088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530573.367:6089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530573.367:6090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36904 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530573.411:6091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530573.411:6092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530573.421:6093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530573.421:6094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530573.425:6095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530573.446:6096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530573.446:6097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530573.455:6098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530573.455:6099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530573.458:6100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530573.508:6101): pid=36949 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530573.509:6102): pid=36949 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776C72617368757478777463726F73626279696B6B6270736168796F69686277203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537332E3331383738382D33363836322D3130323532373630363135343030352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530573.509:6103): pid=36949 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530573.510:6104): pid=36949 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530573.678:6105): pid=36949 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530573.678:6106): pid=36949 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530573.682:6107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530573.682:6108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530573.691:6109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530573.691:6110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530573.692:6111): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36961 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530573.711:6112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530573.711:6113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.015:6114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.015:6115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.016:6116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530574.035:6117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.035:6118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.044:6119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.044:6120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.045:6121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=36993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530574.077:6122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.077:6123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.092:6124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.092:6125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.094:6126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37015 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530574.122:6127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.122:6128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.132:6129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.132:6130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.134:6131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37029 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530574.164:6132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.164:6133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.173:6134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.174:6135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.175:6136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37044 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530574.235:6137): pid=37059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530574.235:6138): pid=37059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7972616C6F7471616E646570796E6A74646F766E66696E676A656E6E6D7A7264203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537342E303336393138322D33363937362D3231373037373235363936343332302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530574.236:6139): pid=37059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530574.238:6140): pid=37059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530574.402:6141): pid=37059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530574.402:6142): pid=37059 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530574.406:6143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.406:6144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.417:6145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.417:6146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.418:6147): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37068 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530574.446:6148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.446:6149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.640:6150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.640:6151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.640:6152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37084 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530574.658:6153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.658:6154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.667:6155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.667:6156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.668:6157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37098 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530574.700:6158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.700:6159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.713:6160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.713:6161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.714:6162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37119 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530574.743:6163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.743:6164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.753:6165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.753:6166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.754:6167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37133 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530574.772:6168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530574.772:6169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530574.782:6170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530574.782:6171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530574.783:6172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37148 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530574.835:6173): pid=37163 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530574.835:6174): pid=37163 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7376646375676376766377716A646A796C667A756B746365756D777467777768203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537342E3635393938322D33363937362D39373932303538363130353730382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530574.835:6175): pid=37163 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530574.836:6176): pid=37163 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530574.999:6177): pid=37163 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530574.999:6178): pid=37163 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530575.001:6179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.001:6180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.011:6181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.011:6182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.012:6183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37169 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.031:6184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.031:6185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.215:6186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.215:6187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.216:6188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37184 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.235:6189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.235:6190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.244:6191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.244:6192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.245:6193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.269:6194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.269:6195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.285:6196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.285:6197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.286:6198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.315:6199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.315:6200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.326:6201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.326:6202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.327:6203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37233 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.349:6204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.350:6205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.359:6206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.359:6207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.360:6208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37248 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530575.413:6209): pid=37263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530575.413:6210): pid=37263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787570746D7572726C6D666875696D736C65636B6A686D61637177686D796877203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537352E323337323535362D33363937362D3237333132363235303037303439352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530575.413:6211): pid=37263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530575.415:6212): pid=37263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530575.567:6213): pid=37263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530575.567:6214): pid=37263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530575.572:6215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.572:6216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.582:6217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.582:6218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.582:6219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37267 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.602:6220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.602:6221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.801:6222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.804:6223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.805:6224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37282 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.825:6225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.825:6226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.834:6227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.834:6228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.835:6229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37296 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.860:6230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.860:6231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.873:6232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.873:6233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.874:6234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37317 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.901:6235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.901:6236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.913:6237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.913:6238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.914:6239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37331 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530575.935:6240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530575.935:6241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530575.946:6242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530575.946:6243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530575.947:6244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37346 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530576.000:6245): pid=37361 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530576.000:6246): pid=37361 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7266756C6964696F6A67796A6E676B706A6566647067666E796A696A71737165203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537352E383236343434392D33363937362D36343537363236373133363938372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530576.000:6247): pid=37361 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530576.002:6248): pid=37361 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530576.159:6249): pid=37361 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530576.159:6250): pid=37361 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530576.161:6251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530576.162:6252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530576.171:6253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530576.171:6254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530576.172:6255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530576.192:6256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530576.192:6257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530576.377:6258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530576.377:6259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530576.379:6260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37380 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530576.402:6261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530576.402:6262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530576.413:6263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530576.413:6264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530576.414:6265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37394 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530576.436:6266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530576.436:6267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530576.452:6268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530576.452:6269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530576.453:6270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37415 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530576.485:6271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530576.486:6272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530576.499:6273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530576.500:6274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530576.501:6275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37429 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530576.518:6276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530576.519:6277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530576.533:6278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530576.533:6279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530576.534:6280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37444 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530576.587:6281): pid=37459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530576.587:6282): pid=37459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F666A6669616F6975726870706A716B65786B6B766C796877746D767A646870203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537362E343034343638382D33363937362D3135353237373939383538323031352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530576.587:6283): pid=37459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530576.589:6284): pid=37459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530576.746:6285): pid=37459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530576.746:6286): pid=37459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530576.748:6287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530576.748:6288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530576.758:6289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530576.758:6290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530576.759:6291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37463 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530576.777:6292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530576.777:6293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530576.990:6294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530576.990:6295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530576.991:6296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37478 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.011:6297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.011:6298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.021:6299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.021:6300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.021:6301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37492 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.042:6302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.042:6303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.056:6304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.056:6305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.057:6306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37513 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.091:6307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.091:6308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.098:6309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.098:6310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.099:6311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.121:6312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.121:6313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.134:6314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.134:6315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.134:6316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530577.188:6317): pid=37557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530577.188:6318): pid=37557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726267687065786F6F737974666A73796661626D79656E6767616A786E6A7361203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537372E303133343936392D33363937362D3230373736353337333338333538312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530577.188:6319): pid=37557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530577.190:6320): pid=37557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530577.343:6321): pid=37557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530577.343:6322): pid=37557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530577.345:6323): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.345:6324): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.355:6325): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.355:6326): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.356:6327): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37562 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.374:6328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.374:6329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.575:6330): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.575:6331): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.576:6332): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37577 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.594:6333): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.594:6334): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.604:6335): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.605:6336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.605:6337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37591 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.632:6338): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.632:6339): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.649:6340): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.649:6341): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.650:6342): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37613 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.695:6343): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.695:6344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.705:6345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.705:6346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.706:6347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37627 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.725:6348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.725:6349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.734:6350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.734:6351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.735:6352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37642 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530577.788:6353): pid=37657 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530577.788:6354): pid=37657 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66637472767672626C71687A656D627979786565656179617975796866756C62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537372E353936303136322D33363937362D3233303038373430373031363533302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530577.789:6355): pid=37657 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530577.790:6356): pid=37657 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530577.959:6357): pid=37657 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530577.959:6358): pid=37657 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530577.961:6359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.962:6360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530577.972:6361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530577.972:6362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530577.972:6363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37665 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530577.993:6364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530577.993:6365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.182:6366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.182:6367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.183:6368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37680 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530578.204:6369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.204:6370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.213:6371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.213:6372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.214:6373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37694 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530578.239:6374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.239:6375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.255:6376): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.255:6377): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.257:6378): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37715 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530578.289:6379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.289:6380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.299:6381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.299:6382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.300:6383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37729 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530578.318:6384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.318:6385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.328:6386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.328:6387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.329:6388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37744 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530578.383:6389): pid=37759 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530578.383:6390): pid=37759 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64767773626E756B686F73736B70707A787277796B6E6A6B7867797A61706775203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537382E3230353537372D33363937362D3132333939343634373934333239362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530578.384:6391): pid=37759 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530578.387:6392): pid=37759 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530578.544:6393): pid=37759 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530578.544:6394): pid=37759 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530578.546:6395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.546:6396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.556:6397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.556:6398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.557:6399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37764 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530578.576:6400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.576:6401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.765:6402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.767:6403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.769:6404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530578.787:6405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.787:6406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.796:6407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.797:6408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.797:6409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37794 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530578.826:6410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.826:6411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.839:6412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.840:6413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.841:6414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37815 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530578.880:6415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.880:6416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.891:6417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.891:6418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.892:6419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37829 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530578.911:6420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530578.911:6421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530578.921:6422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530578.921:6423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530578.922:6424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530578.980:6425): pid=37859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530578.980:6426): pid=37859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A6269616377776E727370797075706F7873717A767071766A77756F766B67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537382E3738393333392D33363937362D3135323733323433373037393337302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530578.980:6427): pid=37859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530578.982:6428): pid=37859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530579.148:6429): pid=37859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530579.148:6430): pid=37859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530579.151:6431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530579.151:6432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530579.161:6433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530579.161:6434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530579.162:6435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37877 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530579.182:6436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530579.182:6437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530579.378:6438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530579.379:6439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530579.379:6440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37892 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530579.398:6441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530579.398:6442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530579.408:6443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530579.408:6444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530579.408:6445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530579.434:6446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530579.434:6447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530579.449:6448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530579.449:6449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530579.450:6450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530579.483:6451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530579.483:6452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530579.492:6453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530579.492:6454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530579.493:6455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530579.514:6456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530579.514:6457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530579.527:6458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530579.527:6459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530579.528:6460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530579.580:6461): pid=37971 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530579.580:6462): pid=37971 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68747274636D697872706F6E746972657462716165626E626169647765667277203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303537392E333939393335372D33363937362D3235323938323438353034313338382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530579.580:6463): pid=37971 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530579.582:6464): pid=37971 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530579.749:6465): pid=37971 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530579.749:6466): pid=37971 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530579.754:6467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530579.754:6468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530579.777:6469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530579.777:6470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530579.778:6471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37975 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530579.796:6472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530579.796:6473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.034:6474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.034:6475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.035:6476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=37990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530580.052:6477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.052:6478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.061:6479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.061:6480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.062:6481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38004 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530580.084:6482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.084:6483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.099:6484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.099:6485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.099:6486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530580.138:6487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.138:6488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.149:6489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.149:6490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.150:6491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38039 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530580.172:6492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.172:6493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.184:6494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.184:6495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.185:6496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38054 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530580.236:6497): pid=38069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530580.236:6498): pid=38069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7472626669727964616768786478786E7063667561777A77627A666D756F6578203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538302E303534303630322D33363937362D383135383134363337343339382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530580.236:6499): pid=38069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530580.238:6500): pid=38069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530580.403:6501): pid=38069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530580.403:6502): pid=38069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530580.405:6503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.405:6504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.415:6505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.415:6506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.415:6507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38073 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530580.434:6508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.434:6509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.625:6510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.626:6511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.626:6512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38088 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530580.643:6513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.643:6514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.656:6515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.656:6516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.657:6517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38102 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530580.691:6518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.691:6519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.705:6520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.705:6521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.706:6522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530580.742:6523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.742:6524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.754:6525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.754:6526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.755:6527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38137 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530580.782:6528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530580.782:6529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530580.793:6530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530580.793:6531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530580.794:6532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38152 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530580.847:6533): pid=38167 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530580.847:6534): pid=38167 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726C76667878756F637A6D626C64626E616F6C616F61716771797471687A7167203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538302E363435383730372D33363937362D3234303134383539373535363235342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530580.848:6535): pid=38167 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530580.849:6536): pid=38167 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530581.011:6537): pid=38167 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530581.011:6538): pid=38167 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530581.027:6539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.027:6540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.038:6541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.038:6542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.039:6543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38171 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.080:6544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.080:6545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.292:6546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.292:6547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.293:6548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38186 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.315:6549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.315:6550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.324:6551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.324:6552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.325:6553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.347:6554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.347:6555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.361:6556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.361:6557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.362:6558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38225 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.389:6559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.390:6560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.399:6561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.399:6562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.400:6563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38239 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.417:6564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.417:6565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.426:6566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.426:6567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.427:6568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530581.476:6569): pid=38269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530581.476:6570): pid=38269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6A6C6F70736B727176706C6661766161786D63676E6F6971746A63656A6F64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538312E333137323437362D33363937362D3231383836393532323831333532332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530581.476:6571): pid=38269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530581.477:6572): pid=38269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530581.626:6573): pid=38269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530581.626:6574): pid=38269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530581.628:6575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.629:6576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.638:6577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.638:6578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.638:6579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.657:6580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.657:6581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.834:6582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.834:6583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.835:6584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.853:6585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.853:6586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.862:6587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.862:6588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.863:6589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38302 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.885:6590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.885:6591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.900:6592): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.900:6593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.901:6594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38323 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.929:6595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.929:6596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.942:6597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.942:6598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.943:6599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38337 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530581.962:6600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530581.962:6601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530581.971:6602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530581.971:6603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530581.972:6604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530582.021:6605): pid=38367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530582.021:6606): pid=38367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F6A6C7266796364787370756A7767726A7078756175676B696A707368746F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538312E383535303537372D33363937362D3133313538383432313533353335392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530582.021:6607): pid=38367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530582.023:6608): pid=38367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530582.175:6609): pid=38367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530582.176:6610): pid=38367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530582.178:6611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530582.178:6612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530582.188:6613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530582.188:6614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530582.188:6615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38371 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530582.206:6616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530582.206:6617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530582.378:6618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530582.378:6619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530582.379:6620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530582.400:6621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530582.400:6622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530582.409:6623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530582.409:6624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530582.409:6625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38406 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530582.431:6626): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530582.431:6627): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530582.444:6628): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530582.444:6629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530582.445:6630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38427 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530582.475:6631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530582.475:6632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530582.485:6633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530582.485:6634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530582.485:6635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38449 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530582.503:6636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530582.503:6637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530582.513:6638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530582.513:6639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530582.514:6640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530582.566:6641): pid=38481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530582.566:6642): pid=38481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757478686B786A6E7468696A79767278706D6A756E7870616A77696F7877676C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538322E343031363032372D33363937362D3136383834393739353631363534312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530582.566:6643): pid=38481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530582.568:6644): pid=38481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530582.724:6645): pid=38481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530582.724:6646): pid=38481 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530582.726:6647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530582.726:6648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530582.736:6649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530582.736:6650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530582.737:6651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530582.759:6652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530582.759:6653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530582.941:6654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530582.941:6655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530582.943:6656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530582.960:6657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530582.960:6658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530582.969:6659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530582.969:6660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530582.970:6661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38514 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530583.000:6662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.000:6663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.018:6664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.018:6665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.019:6666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38535 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530583.053:6667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.053:6668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.063:6669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.063:6670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.065:6671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530583.083:6672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.083:6673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.093:6674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.093:6675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.094:6676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530583.146:6677): pid=38581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530583.146:6678): pid=38581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F78657A6F656868686571686176747861616679727674657A6E6D636964736D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538322E393631393034332D33363937362D3235363232363239343735383132392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530583.146:6679): pid=38581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530583.148:6680): pid=38581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530583.295:6681): pid=38581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530583.296:6682): pid=38581 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530583.298:6683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.298:6684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.309:6685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.309:6686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.310:6687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530583.328:6688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.328:6689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.514:6690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.514:6691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.515:6692): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38600 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530583.531:6693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.531:6694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.540:6695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.540:6696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.540:6697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38614 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530583.563:6698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.563:6699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.578:6700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.578:6701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.579:6702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38635 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530583.606:6703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.606:6704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.617:6705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.617:6706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.618:6707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38649 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530583.636:6708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.636:6709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.645:6710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.646:6711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.646:6712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38664 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530583.696:6713): pid=38679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530583.696:6714): pid=38679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F76687A67657869626E65686D67716272636C68696769726F64776D627267203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538332E353332393931322D33363937362D3235313034333336313339383039332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530583.697:6715): pid=38679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530583.698:6716): pid=38679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530583.882:6717): pid=38679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530583.882:6718): pid=38679 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530583.885:6719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.885:6720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530583.894:6721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530583.894:6722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530583.895:6723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38683 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530583.914:6724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530583.914:6725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.110:6726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.110:6727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.111:6728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530584.128:6729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.128:6730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.137:6731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.137:6732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.138:6733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38712 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530584.158:6734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.158:6735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.172:6736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.172:6737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.173:6738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38733 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530584.201:6739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.201:6740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.210:6741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.210:6742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.211:6743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38747 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530584.230:6744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.230:6745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.241:6746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.241:6747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.242:6748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38762 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530584.292:6749): pid=38777 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530584.292:6750): pid=38777 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E766D64696B767178646370716868716B6963697272706269726E7173766670203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538342E31323938382D33363937362D3139323732393932353137303838332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530584.292:6751): pid=38777 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530584.294:6752): pid=38777 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530584.449:6753): pid=38777 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530584.449:6754): pid=38777 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530584.452:6755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.452:6756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.462:6757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.462:6758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.463:6759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38781 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530584.481:6760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.481:6761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.681:6762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.681:6763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.682:6764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530584.699:6765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.699:6766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.708:6767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.708:6768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.709:6769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530584.728:6770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.728:6771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.742:6772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.742:6773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.743:6774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38831 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530584.769:6775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.769:6776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.779:6777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.779:6778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.780:6779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38845 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530584.798:6780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530584.798:6781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530584.807:6782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530584.807:6783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530584.808:6784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530584.859:6785): pid=38875 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530584.859:6786): pid=38875 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736768616A76676B7678626E72646D636A6671646A6C63687078776274616664203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538342E373031303130322D33363937362D3235333737393130313834303138382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530584.859:6787): pid=38875 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530584.861:6788): pid=38875 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530585.017:6789): pid=38875 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530585.017:6790): pid=38875 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530585.020:6791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.020:6792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.030:6793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.030:6794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.030:6795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38881 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.048:6796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.048:6797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.233:6798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.233:6799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.234:6800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38896 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.251:6801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.251:6802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.259:6803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.259:6804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.260:6805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38910 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.281:6806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.281:6807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.294:6808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.294:6809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.295:6810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38931 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.322:6811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.322:6812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.331:6813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.331:6814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.332:6815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38945 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.350:6816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.350:6817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.360:6818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.360:6819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.361:6820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38960 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530585.411:6821): pid=38975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530585.411:6822): pid=38975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75746F706F6578636B78776B616C776E7A716874646D6361726B6D6D71777A7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538352E323532373838382D33363937362D3230373335393434383736313039342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530585.411:6823): pid=38975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530585.412:6824): pid=38975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530585.566:6825): pid=38975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530585.567:6826): pid=38975 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530585.569:6827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.569:6828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.579:6829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.579:6830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.580:6831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.598:6832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.598:6833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.788:6834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.788:6835): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.789:6836): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=38994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.808:6837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.808:6838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.818:6839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.818:6840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.819:6841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39008 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.841:6842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.841:6843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.855:6844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.855:6845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.856:6846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39029 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.886:6847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.886:6848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.897:6849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.897:6850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.898:6851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39043 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530585.918:6852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530585.918:6853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530585.929:6854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530585.929:6855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530585.930:6856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39058 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530585.988:6857): pid=39074 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530585.988:6858): pid=39074 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A726E736278796A77796B63686B66697A6B637A64716E7468657A61756A76203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538352E3831303430342D33363937362D3236313332393632363731333036312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530585.989:6859): pid=39074 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530585.990:6860): pid=39074 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530586.315:6861): pid=39074 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530586.315:6862): pid=39074 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530586.344:6863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530586.344:6864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530586.344:6865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530586.344:6866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530586.346:6867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530586.367:6868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530586.367:6869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530586.547:6870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530586.548:6871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530586.548:6872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39099 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530586.565:6873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530586.565:6874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530586.573:6875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530586.573:6876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530586.574:6877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530586.594:6878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530586.594:6879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530586.607:6880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530586.607:6881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530586.608:6882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530586.636:6883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530586.636:6884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530586.645:6885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530586.645:6886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530586.646:6887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39148 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530586.663:6888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530586.663:6889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530586.673:6890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530586.673:6891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530586.674:6892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530586.722:6893): pid=39178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530586.723:6894): pid=39178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786B64796A6B66687774727A627A6F626F6C6A6A697170716269717775776C6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538362E3536373237322D33363937362D3138343933323031363931333539362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530586.723:6895): pid=39178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530586.724:6896): pid=39178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530586.989:6897): pid=39178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530586.989:6898): pid=39178 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530586.992:6899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530586.992:6900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.002:6901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.002:6902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.003:6903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530587.021:6904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530587.021:6905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.207:6906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.207:6907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.208:6908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39197 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530587.225:6909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530587.225:6910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.235:6911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.235:6912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.236:6913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39211 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530587.271:6914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530587.271:6915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.285:6916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.285:6917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.285:6918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39232 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530587.319:6919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530587.319:6920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.329:6921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.329:6922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.330:6923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39246 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530587.354:6924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530587.354:6925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.394:6926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.394:6927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.395:6928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39261 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530587.445:6929): pid=39276 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530587.445:6930): pid=39276 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72636F6F676D676D7767677A786C7972657066626E756564777A617A6A64716D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538372E323237323335382D33363937362D34333730353135393131373038362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530587.445:6931): pid=39276 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530587.447:6932): pid=39276 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530587.656:6933): pid=39276 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530587.657:6934): pid=39276 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530587.659:6935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530587.659:6936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.669:6937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.669:6938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.670:6939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39280 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530587.697:6940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530587.697:6941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.883:6942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.883:6943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.883:6944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39295 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530587.901:6945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530587.901:6946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.912:6947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.912:6948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.912:6949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39309 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530587.966:6950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530587.966:6951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530587.980:6952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530587.980:6953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530587.981:6954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39330 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530588.008:6955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530588.008:6956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530588.019:6957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530588.019:6958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530588.020:6959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39344 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530588.044:6960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530588.044:6961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530588.054:6962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530588.054:6963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530588.055:6964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530588.106:6965): pid=39374 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530588.106:6966): pid=39374 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78676264767862776978766D676271756276746F7773746173627A6F63656D6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538372E3930333533392D33363937362D3130333630303830313430313239392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530588.106:6967): pid=39374 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530588.108:6968): pid=39374 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530588.316:6969): pid=39374 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530588.316:6970): pid=39374 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530588.319:6971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530588.319:6972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530588.328:6973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530588.328:6974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530588.329:6975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39378 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530588.367:6976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530588.367:6977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530588.571:6978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530588.571:6979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530588.572:6980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530588.588:6981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530588.588:6982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530588.597:6983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530588.597:6984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530588.598:6985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39407 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530588.649:6986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530588.649:6987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530588.662:6988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530588.662:6989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530588.663:6990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39428 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530588.690:6991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530588.690:6992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530588.700:6993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530588.700:6994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530588.701:6995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530588.723:6996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530588.723:6997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530588.766:6998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530588.766:6999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530588.767:7000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39457 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530588.820:7001): pid=39472 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530588.820:7002): pid=39472 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63686C7571726F6B697379707867767072686B74616461686C6A7A736576647A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538382E353930363431332D33363937362D3134353432353530363835353337382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530588.820:7003): pid=39472 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530588.821:7004): pid=39472 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530589.042:7005): pid=39472 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530589.042:7006): pid=39472 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530589.045:7007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530589.045:7008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530589.054:7009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530589.054:7010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530589.055:7011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39476 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530589.074:7012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530589.074:7013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530589.257:7014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530589.257:7015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530589.258:7016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39491 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530589.275:7017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530589.275:7018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530589.284:7019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530589.284:7020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530589.285:7021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39505 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530589.305:7022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530589.305:7023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530589.318:7024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530589.318:7025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530589.319:7026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39526 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530589.346:7027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530589.346:7028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530589.356:7029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530589.356:7030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530589.357:7031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39540 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530589.378:7032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530589.378:7033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530589.387:7034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530589.387:7035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530589.388:7036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39555 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530589.438:7037): pid=39570 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530589.438:7038): pid=39570 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7A74646773737572706A746E727A69786371647A6F7574627A69786C786A73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538392E323737313938362D33363937362D3230393036383239363034353037332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530589.438:7039): pid=39570 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530589.439:7040): pid=39570 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530589.687:7041): pid=39570 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530589.687:7042): pid=39570 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530589.690:7043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530589.690:7044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530589.699:7045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530589.699:7046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530589.700:7047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39574 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530589.750:7048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530589.750:7049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530589.935:7050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530589.935:7051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530589.936:7052): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39589 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530589.955:7053): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530589.955:7054): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530589.964:7055): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530589.964:7056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530589.965:7057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39603 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530590.010:7058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530590.010:7059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530590.025:7060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530590.025:7061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530590.026:7062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39624 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530590.053:7063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530590.053:7064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530590.063:7065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530590.063:7066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530590.063:7067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39638 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530590.083:7068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530590.083:7069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530590.093:7070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530590.093:7071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530590.094:7072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39653 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530590.146:7073): pid=39668 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530590.146:7074): pid=39668 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6766646D61706F6369616E746F7172746E776C69626270706A6672687A6F7A6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303538392E3935373030382D33363937362D3132373939373336343330303532312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530590.147:7075): pid=39668 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530590.148:7076): pid=39668 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530590.362:7077): pid=39668 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530590.362:7078): pid=39668 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530590.364:7079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530590.364:7080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530590.374:7081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530590.374:7082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530590.375:7083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530590.393:7084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530590.393:7085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530590.583:7086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530590.583:7087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530590.584:7088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39689 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530590.602:7089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530590.602:7090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530590.612:7091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530590.612:7092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530590.613:7093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39703 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530590.633:7094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530590.633:7095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530590.646:7096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530590.646:7097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530590.647:7098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39724 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530590.691:7099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530590.691:7100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530590.702:7101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530590.702:7102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530590.703:7103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39738 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530590.730:7104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530590.730:7105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530590.779:7106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530590.779:7107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530590.780:7108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39753 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530590.831:7109): pid=39768 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530590.831:7110): pid=39768 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73726E706B69706D6B63686874786467786377616C6B787961767A786A707468203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303539302E363034313235352D33363937362D3236353433323633313032323736392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530590.831:7111): pid=39768 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530590.833:7112): pid=39768 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530591.094:7113): pid=39768 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530591.094:7114): pid=39768 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530591.096:7115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530591.097:7116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530591.106:7117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530591.106:7118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530591.107:7119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530591.125:7120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530591.125:7121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530591.311:7122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530591.311:7123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530591.312:7124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39787 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530591.329:7125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530591.330:7126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530591.339:7127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530591.339:7128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530591.339:7129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39801 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530591.360:7130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530591.360:7131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530591.374:7132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530591.374:7133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530591.374:7134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39822 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530591.401:7135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530591.401:7136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530591.412:7137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530591.412:7138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530591.413:7139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39836 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530591.432:7140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530591.432:7141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530591.441:7142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530591.441:7143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530591.442:7144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530591.493:7145): pid=39866 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530591.494:7146): pid=39866 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7364767A696879696A626B746B64767774767A7266776A736268746773656861203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303539312E333331373037352D33363937362D32383231393836393230323635342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530591.494:7147): pid=39866 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530591.496:7148): pid=39866 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530591.778:7149): pid=39866 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530591.778:7150): pid=39866 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530591.781:7151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530591.781:7152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530591.790:7153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530591.790:7154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530591.791:7155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39870 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530591.810:7156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530591.810:7157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530591.997:7158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530591.997:7159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530591.997:7160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39885 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530592.015:7161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530592.015:7162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530592.025:7163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530592.025:7164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530592.026:7165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530592.047:7166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530592.047:7167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530592.061:7168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530592.061:7169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530592.062:7170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39920 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530592.094:7171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530592.094:7172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530592.104:7173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530592.104:7174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530592.105:7175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530592.124:7176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530592.124:7177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530592.133:7178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530592.133:7179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530592.134:7180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39949 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530592.185:7181): pid=39964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530592.185:7182): pid=39964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68687375666B71787863667572666C6A77666667616A6477766F7277726D6B6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303539322E3031363834392D33363937362D3132343433343439373938363436362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530592.186:7183): pid=39964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530592.187:7184): pid=39964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530592.353:7185): pid=39964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530592.354:7186): pid=39964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530592.356:7187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530592.356:7188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530592.366:7189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530592.366:7190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530592.367:7191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39968 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530592.385:7192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530592.385:7193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530593.050:7194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530593.050:7195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530593.051:7196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=39990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530593.067:7197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530593.067:7198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530593.077:7199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530593.077:7200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530593.078:7201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40004 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530593.098:7202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530593.098:7203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530593.112:7204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530593.112:7205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530593.113:7206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530593.141:7207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530593.141:7208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530593.151:7209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530593.151:7210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530593.152:7211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40039 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530593.170:7212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530593.170:7213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530593.180:7214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530593.180:7215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530593.180:7216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40054 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530593.229:7217): pid=40069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530593.229:7218): pid=40069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C636A7A786D6361796C626B666C796B7674656A636E656F6469706D617375203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303539332E303639353333362D33393938382D34373336323233303937323730392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530593.230:7219): pid=40069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530593.231:7220): pid=40069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530593.486:7221): pid=40069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530593.486:7222): pid=40069 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530593.488:7223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530593.488:7224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530593.497:7225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530593.497:7226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530593.498:7227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40090 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530593.516:7228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530593.516:7229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530593.804:7230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530593.804:7231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530593.805:7232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530593.822:7233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530593.822:7234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530593.832:7235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530593.832:7236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530593.832:7237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530593.854:7238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530593.854:7239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530593.967:7240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530593.967:7241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530593.968:7242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530593.996:7243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530593.996:7244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530594.006:7245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530594.006:7246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530594.007:7247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530594.026:7248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530594.026:7249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530594.045:7250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530594.045:7251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530594.046:7252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40173 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530594.101:7253): pid=40188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530594.101:7254): pid=40188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A70636F656A766465696C6B65617A68766E78756B7A786F6C6469636F77666A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303539332E3832343333362D34303130372D3230333939303934363837373134382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530594.102:7255): pid=40188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530594.103:7256): pid=40188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530594.443:7257): pid=40188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530594.444:7258): pid=40188 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530594.446:7259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530594.446:7260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530594.458:7261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530594.458:7262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530594.459:7263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40193 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530594.478:7264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530594.478:7265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530594.487:7266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530594.487:7267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530594.488:7268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40207 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530594.517:7269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530594.517:7270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530594.531:7271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530594.531:7272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530594.531:7273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530594.559:7274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530594.559:7275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530594.569:7276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530594.569:7277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530594.570:7278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530594.588:7279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530594.588:7280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530594.597:7281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530594.597:7282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530594.598:7283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40252 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530594.648:7284): pid=40267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530594.648:7285): pid=40267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D786A6B706C716D6D65676F72627265726267677666647578747767787176203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303539332E3832343333362D34303130372D3230333939303934363837373134382F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530594.648:7286): pid=40267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530594.650:7287): pid=40267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530594.858:7288): pid=40267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530594.858:7289): pid=40267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530594.860:7290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530594.860:7291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530594.870:7292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530594.870:7293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530594.871:7294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530594.889:7295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530594.889:7296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530595.137:7297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530595.137:7298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530595.137:7299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40290 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530595.155:7300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530595.155:7301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530595.165:7302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530595.165:7303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530595.165:7304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40304 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530595.186:7305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530595.186:7306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530595.201:7307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530595.201:7308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530595.202:7309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530595.230:7310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530595.230:7311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530595.240:7312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530595.240:7313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530595.241:7314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40340 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530595.277:7315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530595.277:7316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530595.287:7317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530595.287:7318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530595.288:7319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=40355 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530595.338:7320): pid=40370 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530595.338:7321): pid=40370 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7761797972626C6E6E75767579687A6B69696866656E686E75666D6861766C61203B2068747470735F70726F78793D272720687474705F70726F78793D272720444F434B45525F434C49454E545F54494D454F55543D31323020434F4D504F53455F485454505F54494D454F55543D313230202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303539352E313537353634392D34303238362D39363138343231363833393533372F416E736962616C6C5A5F646F636B65725F636F6D706F73652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530595.338:7322): pid=40370 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530595.340:7323): pid=40370 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530598.124:7324): prog-id=297 op=LOAD
type=SYSCALL msg=audit(1748530598.124:7324): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=40409 pid=40421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.124:7324): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393939356230613038353465363463363930386132396464
type=BPF msg=audit(1748530598.124:7325): prog-id=298 op=LOAD
type=SYSCALL msg=audit(1748530598.124:7325): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=40409 pid=40421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.124:7325): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393939356230613038353465363463363930386132396464
type=BPF msg=audit(1748530598.125:7326): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.125:7327): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.125:7328): prog-id=299 op=LOAD
type=SYSCALL msg=audit(1748530598.125:7328): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=40409 pid=40421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.125:7328): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63393939356230613038353465363463363930386132396464
type=BPF msg=audit(1748530598.372:7329): prog-id=300 op=LOAD
type=BPF msg=audit(1748530598.373:7330): prog-id=301 op=LOAD
type=SYSCALL msg=audit(1748530598.373:7330): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00014bad0 a2=90 a3=0 items=0 ppid=40651 pid=40672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.373:7330): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33643938353666646336616264646438623962303532636634
type=BPF msg=audit(1748530598.373:7331): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.373:7332): prog-id=302 op=LOAD
type=SYSCALL msg=audit(1748530598.373:7332): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00014bc48 a2=90 a3=0 items=0 ppid=40651 pid=40672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.373:7332): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33643938353666646336616264646438623962303532636634
type=BPF msg=audit(1748530598.373:7333): prog-id=303 op=LOAD
type=SYSCALL msg=audit(1748530598.373:7333): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00014b9d8 a2=90 a3=0 items=0 ppid=40651 pid=40672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.373:7333): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33643938353666646336616264646438623962303532636634
type=BPF msg=audit(1748530598.374:7334): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.374:7335): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.374:7336): prog-id=304 op=LOAD
type=SYSCALL msg=audit(1748530598.374:7336): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00014beb0 a2=90 a3=0 items=0 ppid=40651 pid=40672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.374:7336): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33643938353666646336616264646438623962303532636634
type=BPF msg=audit(1748530598.475:7337): prog-id=305 op=LOAD
type=BPF msg=audit(1748530598.477:7338): prog-id=306 op=LOAD
type=BPF msg=audit(1748530598.477:7339): prog-id=307 op=LOAD
type=SYSCALL msg=audit(1748530598.477:7339): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=40784 pid=40845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.477:7339): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613665376562373930653437323136663261346630656635
type=BPF msg=audit(1748530598.478:7340): prog-id=308 op=LOAD
type=SYSCALL msg=audit(1748530598.478:7340): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=40795 pid=40843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.478:7340): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356634643935386533303130316661373962376533383533
type=BPF msg=audit(1748530598.478:7341): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.479:7342): prog-id=309 op=LOAD
type=SYSCALL msg=audit(1748530598.479:7342): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=40784 pid=40845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.479:7342): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613665376562373930653437323136663261346630656635
type=BPF msg=audit(1748530598.479:7343): prog-id=310 op=LOAD
type=SYSCALL msg=audit(1748530598.479:7343): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=40784 pid=40845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.479:7343): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613665376562373930653437323136663261346630656635
type=BPF msg=audit(1748530598.479:7344): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.479:7345): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.479:7346): prog-id=311 op=LOAD
type=SYSCALL msg=audit(1748530598.479:7346): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=40784 pid=40845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.479:7346): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613665376562373930653437323136663261346630656635
type=BPF msg=audit(1748530598.484:7347): prog-id=312 op=LOAD
type=BPF msg=audit(1748530598.484:7348): prog-id=313 op=LOAD
type=SYSCALL msg=audit(1748530598.484:7348): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=40737 pid=40766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.484:7348): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393833316336373761393337313837356530396537626436
type=BPF msg=audit(1748530598.484:7349): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.485:7350): prog-id=314 op=LOAD
type=BPF msg=audit(1748530598.485:7351): prog-id=0 op=UNLOAD
type=SYSCALL msg=audit(1748530598.485:7350): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=40737 pid=40766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.485:7350): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393833316336373761393337313837356530396537626436
type=BPF msg=audit(1748530598.485:7352): prog-id=315 op=LOAD
type=BPF msg=audit(1748530598.485:7353): prog-id=316 op=LOAD
type=SYSCALL msg=audit(1748530598.485:7353): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=40795 pid=40843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=SYSCALL msg=audit(1748530598.485:7352): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=40737 pid=40766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.485:7352): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393833316336373761393337313837356530396537626436
type=PROCTITLE msg=audit(1748530598.485:7353): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356634643935386533303130316661373962376533383533
type=BPF msg=audit(1748530598.486:7354): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.486:7355): prog-id=317 op=LOAD
type=BPF msg=audit(1748530598.486:7356): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.486:7357): prog-id=318 op=LOAD
type=SYSCALL msg=audit(1748530598.486:7355): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=40795 pid=40843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.486:7355): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356634643935386533303130316661373962376533383533
type=BPF msg=audit(1748530598.487:7358): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.487:7359): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.487:7360): prog-id=319 op=LOAD
type=SYSCALL msg=audit(1748530598.486:7357): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=40737 pid=40766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.486:7357): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393833316336373761393337313837356530396537626436
type=SYSCALL msg=audit(1748530598.487:7360): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=40795 pid=40843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.487:7360): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356634643935386533303130316661373962376533383533
type=BPF msg=audit(1748530598.502:7361): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.517:7362): prog-id=320 op=LOAD
type=BPF msg=audit(1748530598.517:7363): prog-id=321 op=LOAD
type=SYSCALL msg=audit(1748530598.517:7363): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1ad0 a2=90 a3=0 items=0 ppid=40856 pid=40932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.517:7363): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383636353135383863386234306265363965346463333238
type=BPF msg=audit(1748530598.518:7364): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.518:7365): prog-id=322 op=LOAD
type=SYSCALL msg=audit(1748530598.518:7365): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=40856 pid=40932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.518:7365): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383636353135383863386234306265363965346463333238
type=BPF msg=audit(1748530598.518:7366): prog-id=323 op=LOAD
type=SYSCALL msg=audit(1748530598.518:7366): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=40856 pid=40932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.518:7366): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383636353135383863386234306265363965346463333238
type=BPF msg=audit(1748530598.518:7367): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.518:7368): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.518:7369): prog-id=324 op=LOAD
type=SYSCALL msg=audit(1748530598.518:7369): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=40856 pid=40932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.518:7369): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383636353135383863386234306265363965346463333238
type=BPF msg=audit(1748530598.523:7370): prog-id=325 op=LOAD
type=BPF msg=audit(1748530598.526:7371): prog-id=326 op=LOAD
type=SYSCALL msg=audit(1748530598.526:7371): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=40933 pid=41023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.526:7371): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35653731663233313265323765303432393834356133626536
type=BPF msg=audit(1748530598.526:7372): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.526:7373): prog-id=327 op=LOAD
type=SYSCALL msg=audit(1748530598.526:7373): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=40933 pid=41023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.526:7373): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35653731663233313265323765303432393834356133626536
type=BPF msg=audit(1748530598.526:7374): prog-id=328 op=LOAD
type=SYSCALL msg=audit(1748530598.526:7374): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=40933 pid=41023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.526:7374): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35653731663233313265323765303432393834356133626536
type=BPF msg=audit(1748530598.526:7375): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.526:7376): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.526:7377): prog-id=329 op=LOAD
type=SYSCALL msg=audit(1748530598.526:7377): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=40933 pid=41023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.526:7377): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35653731663233313265323765303432393834356133626536
type=BPF msg=audit(1748530598.739:7378): prog-id=330 op=LOAD
type=BPF msg=audit(1748530598.739:7379): prog-id=331 op=LOAD
type=SYSCALL msg=audit(1748530598.739:7379): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=41414 pid=41446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.739:7379): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65333334646231396463363531383864373964663564373233
type=BPF msg=audit(1748530598.739:7380): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.739:7381): prog-id=332 op=LOAD
type=SYSCALL msg=audit(1748530598.739:7381): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=41414 pid=41446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.739:7381): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65333334646231396463363531383864373964663564373233
type=BPF msg=audit(1748530598.739:7382): prog-id=333 op=LOAD
type=SYSCALL msg=audit(1748530598.739:7382): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=41414 pid=41446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.739:7382): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65333334646231396463363531383864373964663564373233
type=BPF msg=audit(1748530598.739:7383): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.739:7384): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530598.739:7385): prog-id=334 op=LOAD
type=SYSCALL msg=audit(1748530598.739:7385): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=41414 pid=41446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530598.739:7385): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65333334646231396463363531383864373964663564373233
type=USER_END msg=audit(1748530598.859:7386): pid=40370 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530598.859:7387): pid=40370 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530598.864:7388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530598.864:7389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530598.876:7390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530598.876:7391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530598.878:7392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=41589 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530598.911:7393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530598.911:7394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530599.404:7395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530599.404:7396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530599.405:7397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=41620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530599.423:7398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530599.423:7399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530599.432:7400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530599.432:7401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530599.432:7402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=41634 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530599.454:7403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530599.454:7404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530599.469:7405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530599.469:7406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530599.470:7407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=41655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530599.501:7408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530599.501:7409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530599.513:7410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530599.513:7411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530599.514:7412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=41669 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530599.533:7413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530599.533:7414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530599.545:7415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530599.545:7416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530599.546:7417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=41684 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530599.595:7418): pid=41699 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530599.595:7419): pid=41699 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66656D73766D756F657A64756472796C747A7776736278647871777A61627462203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303539392E343234373539392D34313631362D3234343434313138333233393039392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530599.596:7420): pid=41699 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530599.598:7421): pid=41699 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530610.676:7422): pid=41699 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530610.676:7423): pid=41699 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530610.679:7424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530610.679:7425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530610.693:7426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530610.693:7427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530610.694:7428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42012 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530610.726:7429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530610.726:7430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530611.024:7431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530611.024:7432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530611.025:7433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530611.044:7434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530611.044:7435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530611.056:7436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530611.056:7437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530611.057:7438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42042 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530611.100:7439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530611.100:7440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530611.115:7441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530611.115:7442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530611.119:7443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42063 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530611.194:7444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530611.194:7445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530611.212:7446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530611.212:7447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530611.214:7448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42077 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530611.249:7449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530611.249:7450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530611.261:7451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530611.261:7452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530611.263:7453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42092 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530611.352:7454): pid=42107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530611.352:7455): pid=42107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627576696974677271626A73747668666E74736E66617266777372626B67756B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631312E3034353933382D34313631362D34313031373639313136343630372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530611.352:7456): pid=42107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530611.386:7457): pid=42107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530611.781:7458): pid=42107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530611.781:7459): pid=42107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530611.783:7460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530611.783:7461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530611.794:7462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530611.794:7463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530611.795:7464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42156 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530611.831:7465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530611.831:7466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530612.109:7467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530612.109:7468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530612.112:7469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42209 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530612.149:7470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530612.149:7471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530612.155:7472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530612.155:7473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530612.156:7474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42229 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530612.202:7475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530612.203:7476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530612.216:7477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530612.216:7478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530612.217:7479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42250 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530612.256:7480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530612.256:7481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530612.270:7482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530612.270:7483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530612.271:7484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42264 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530612.304:7485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530612.304:7486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530612.316:7487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530612.316:7488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530612.320:7489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42279 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530612.405:7490): pid=42297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530612.405:7491): pid=42297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79696C76707A6E7A63637064716E736279727971756D7A66776475706B6A6D67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631322E313437373639352D34323138372D3235303137333635333839343639322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530612.405:7492): pid=42297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530612.413:7493): pid=42297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530612.609:7494): pid=42297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530612.609:7495): pid=42297 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530612.613:7496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530612.614:7497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530612.626:7498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530612.626:7499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530612.628:7500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530612.659:7501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530612.659:7502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530612.938:7503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530612.938:7504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530612.939:7505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530612.971:7506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530612.971:7507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530612.981:7508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530612.984:7509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530612.985:7510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42382 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530613.038:7511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530613.038:7512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530613.052:7513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530613.052:7514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530613.054:7515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530613.111:7516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530613.111:7517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530613.121:7518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530613.121:7519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530613.122:7520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42454 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530613.148:7521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530613.148:7522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530613.158:7523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530613.158:7524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530613.161:7525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42471 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530613.235:7526): pid=42489 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530613.235:7527): pid=42489 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69766A69696F6F6B617669787A6B637664726877667A7572786176646D656470203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631322E3937333337332D34323331382D31393939323736333639393432352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530613.235:7528): pid=42489 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530613.239:7529): pid=42489 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530613.402:7530): pid=42489 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530613.402:7531): pid=42489 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530613.405:7532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530613.405:7533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530613.415:7534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530613.415:7535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530613.419:7536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530613.438:7537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530613.438:7538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530613.716:7539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530613.716:7540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530613.718:7541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42513 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530613.749:7542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530613.749:7543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530613.762:7544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530613.762:7545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530613.765:7546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42528 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530613.806:7547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530613.806:7548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530613.822:7549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530613.822:7550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530613.824:7551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42549 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530613.874:7552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530613.874:7553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530613.888:7554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530613.888:7555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530613.892:7556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42564 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530613.923:7557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530613.923:7558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530613.933:7559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530613.933:7560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530613.934:7561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42579 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530613.984:7562): pid=42594 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530613.984:7563): pid=42594 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626B6D777168716D6C7A796366736B6E7A64696E6E686E726E75637163676E6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631332E373534333236362D34323531312D3139303232343738383436363938352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530613.984:7564): pid=42594 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530613.987:7565): pid=42594 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530614.148:7566): pid=42594 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530614.148:7567): pid=42594 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530614.153:7568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530614.153:7569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530614.163:7570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530614.163:7571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530614.164:7572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42599 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530614.189:7573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530614.189:7574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530614.583:7575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530614.583:7576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530614.584:7577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42616 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530614.619:7578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530614.619:7579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530614.628:7580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530614.628:7581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530614.632:7582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42633 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530614.652:7583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530614.653:7584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530614.667:7585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530614.667:7586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530614.668:7587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530614.701:7588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530614.701:7589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530614.711:7590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530614.711:7591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530614.712:7592): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42670 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530614.731:7593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530614.731:7594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530614.743:7595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530614.743:7596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530614.744:7597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42685 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530614.806:7598): pid=42700 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530614.806:7599): pid=42700 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6568766E646566796865696A696C6764706A78626E7A6C627279656A6B7565203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631342E363231313838392D34323631342D3137363133343339393631363134392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530614.807:7600): pid=42700 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530614.808:7601): pid=42700 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530614.984:7602): pid=42700 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530614.985:7603): pid=42700 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530614.989:7604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530614.990:7605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530614.999:7606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530614.999:7607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.001:7608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42704 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.020:7609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.020:7610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.216:7611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.216:7612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.217:7613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42722 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.236:7614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.236:7615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.246:7616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.246:7617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.247:7618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42736 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.274:7619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.274:7620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.287:7621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.288:7622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.289:7623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42757 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.318:7624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.318:7625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.328:7626): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.328:7627): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.329:7628): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42771 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.346:7629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.347:7630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.357:7631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.357:7632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.358:7633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530615.418:7634): pid=42801 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530615.418:7635): pid=42801 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71696C7563627962676C6A686E7979617A6D79717A796F79737973626C6F7263203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631352E3233383234392D34323631342D393839393839363434393832372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530615.418:7636): pid=42801 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530615.419:7637): pid=42801 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530615.616:7638): pid=42801 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530615.616:7639): pid=42801 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530615.619:7640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.620:7641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.629:7642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.629:7643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.630:7644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42805 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.648:7645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.648:7646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.832:7647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.832:7648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.833:7649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.849:7650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.849:7651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.859:7652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.860:7653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.860:7654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.890:7655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.890:7656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.902:7657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.903:7658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.904:7659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42855 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.936:7660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.937:7661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.947:7662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.947:7663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.948:7664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530615.970:7665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530615.970:7666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530615.983:7667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530615.983:7668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530615.985:7669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42884 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530616.034:7670): pid=42899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530616.034:7671): pid=42899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F62656C6D6C73777365676A6967627175696563687975687766696A6F757069203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631352E383531383133362D34323631342D31323435323535353933383835392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530616.035:7672): pid=42899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530616.036:7673): pid=42899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530616.193:7674): pid=42899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530616.193:7675): pid=42899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530616.196:7676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530616.197:7677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530616.207:7678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530616.207:7679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530616.208:7680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530616.231:7681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530616.231:7682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=BPF msg=audit(1748530616.386:7683): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530616.386:7684): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1748530616.449:7685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530616.450:7686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530616.450:7687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42952 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530616.468:7688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530616.468:7689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530616.478:7690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530616.478:7691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530616.479:7692): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42966 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530616.514:7693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530616.514:7694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530616.529:7695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530616.529:7696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530616.533:7697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=42994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530616.585:7698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530616.585:7699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530616.595:7700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530616.595:7701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530616.596:7702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43032 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=BPF msg=audit(1748530616.622:7703): prog-id=335 op=LOAD
type=BPF msg=audit(1748530616.624:7704): prog-id=336 op=LOAD
type=SYSCALL msg=audit(1748530616.624:7704): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bad0 a2=90 a3=0 items=0 ppid=42997 pid=43013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530616.624:7704): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383636353135383863386234306265363965346463333238
type=BPF msg=audit(1748530616.624:7705): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530616.624:7706): prog-id=337 op=LOAD
type=SYSCALL msg=audit(1748530616.624:7706): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bc48 a2=90 a3=0 items=0 ppid=42997 pid=43013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530616.624:7706): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383636353135383863386234306265363965346463333238
type=BPF msg=audit(1748530616.624:7707): prog-id=338 op=LOAD
type=SYSCALL msg=audit(1748530616.624:7707): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011b9d8 a2=90 a3=0 items=0 ppid=42997 pid=43013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530616.624:7707): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383636353135383863386234306265363965346463333238
type=BPF msg=audit(1748530616.624:7708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530616.625:7709): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530616.625:7710): prog-id=339 op=LOAD
type=SYSCALL msg=audit(1748530616.625:7710): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011beb0 a2=90 a3=0 items=0 ppid=42997 pid=43013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530616.625:7710): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383636353135383863386234306265363965346463333238
type=USER_END msg=audit(1748530616.628:7711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530616.628:7712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530616.639:7713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530616.639:7714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530616.640:7715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43056 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530616.702:7716): pid=43071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530616.703:7717): pid=43071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76657A697A636A6D68646C786A697170736761706F647769666F666B6B736E63203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631362E343730303132342D34323631342D3232303530353130393031323831342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530616.703:7718): pid=43071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530616.707:7719): pid=43071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530616.863:7720): pid=43071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530616.864:7721): pid=43071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530616.867:7722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530616.867:7723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530616.877:7724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530616.877:7725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530616.877:7726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43152 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530616.899:7727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530616.899:7728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.078:7729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.079:7730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.080:7731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43168 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530617.097:7732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.097:7733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.107:7734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.107:7735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.108:7736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530617.130:7737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.131:7738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.145:7739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.145:7740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.149:7741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530617.180:7742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.181:7743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.192:7744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.192:7745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.193:7746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530617.215:7747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.215:7748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.225:7749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.225:7750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.226:7751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43232 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530617.292:7752): pid=43247 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530617.293:7753): pid=43247 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6673657A696C6775616273786A77716A73716C727A6C716364717A6170727274203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631372E3039383933342D34323631342D3236323737373039393838313138372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530617.293:7754): pid=43247 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530617.296:7755): pid=43247 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530617.470:7756): pid=43247 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530617.471:7757): pid=43247 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530617.476:7758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.476:7759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.489:7760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.490:7761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.490:7762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530617.521:7763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.521:7764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.723:7765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.723:7766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.723:7767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43268 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530617.749:7768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.749:7769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.758:7770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.759:7771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.761:7772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43282 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530617.782:7773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.782:7774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.796:7775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.796:7776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.797:7777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530617.833:7778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.833:7779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.844:7780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.844:7781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.845:7782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43317 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530617.864:7783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530617.864:7784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530617.874:7785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530617.874:7786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530617.875:7787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43332 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530617.929:7788): pid=43347 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530617.929:7789): pid=43347 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736373646F73706F6569637963696C687A6E6F67616174797264656575627A63203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631372E373531383230362D34323631342D3132353130373038343738313035362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530617.930:7790): pid=43347 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530617.931:7791): pid=43347 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530618.081:7792): pid=43347 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530618.081:7793): pid=43347 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530618.083:7794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530618.083:7795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530618.092:7796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530618.092:7797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530618.093:7798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43351 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530618.112:7799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530618.112:7800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530618.358:7801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530618.358:7802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530618.359:7803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43366 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530618.375:7804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530618.375:7805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530618.384:7806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530618.384:7807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530618.385:7808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43380 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530618.406:7809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530618.406:7810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530618.420:7811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530618.420:7812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530618.420:7813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43401 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530618.447:7814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530618.447:7815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530618.456:7816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530618.456:7817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530618.457:7818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43415 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530618.475:7819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530618.475:7820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530618.484:7821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530618.484:7822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530618.485:7823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43430 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530618.539:7824): pid=43445 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530618.539:7825): pid=43445 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6D756A6F6E767268667166696B656873686C6A656C7873627165647A69797A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631382E333737363135372D34323631342D3136303939393138303835393238362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530618.540:7826): pid=43445 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530618.543:7827): pid=43445 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530618.723:7828): pid=43445 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530618.723:7829): pid=43445 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530618.725:7830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530618.725:7831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530618.735:7832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530618.735:7833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530618.736:7834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43449 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=BPF msg=audit(1748530618.758:7835): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530618.758:7836): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748530618.762:7837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530618.762:7838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530618.964:7839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530618.964:7840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530618.965:7841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43492 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530618.982:7842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530618.982:7843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530618.991:7844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530618.991:7845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530618.992:7846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43506 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530619.021:7847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530619.021:7848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530619.035:7849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530619.035:7850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530619.036:7851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530619.065:7852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530619.065:7853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530619.076:7854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530619.076:7855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530619.078:7856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43541 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530619.095:7857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530619.095:7858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530619.105:7859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530619.105:7860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530619.106:7861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43556 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530619.159:7862): pid=43571 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530619.159:7863): pid=43571 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787877796A75766278677A626E7566627471637A6F707A756D6863726D6B6477203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631382E3938343437382D34323631342D3237343133333636363132353331382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530619.159:7864): pid=43571 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530619.161:7865): pid=43571 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530619.453:7866): pid=43571 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530619.453:7867): pid=43571 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530619.455:7868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530619.456:7869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530619.465:7870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530619.465:7871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530619.466:7872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530619.484:7873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530619.484:7874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530619.673:7875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530619.673:7876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530619.674:7877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530619.691:7878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530619.691:7879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530619.702:7880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530619.702:7881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530619.703:7882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530619.724:7883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530619.724:7884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530619.739:7885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530619.739:7886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530619.739:7887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43625 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530619.776:7888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530619.776:7889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530619.789:7890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530619.789:7891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530619.790:7892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530619.809:7893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530619.809:7894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530619.819:7895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530619.819:7896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530619.820:7897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43654 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530619.875:7898): pid=43669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530619.875:7899): pid=43669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78616A716E7A73666A6376776D647871676B64626661706B677A7271666A7767203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303631392E363933393039362D34323631342D39313433343538333030383838372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530619.876:7900): pid=43669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530619.877:7901): pid=43669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530620.584:7902): pid=43669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530620.584:7903): pid=43669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530620.587:7904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530620.587:7905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530620.596:7906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530620.596:7907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530620.597:7908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43706 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530620.678:7909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530620.678:7910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530620.869:7911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530620.869:7912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530620.871:7913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43721 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530620.889:7914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530620.889:7915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530620.899:7916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530620.899:7917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530620.900:7918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43735 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530621.044:7919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530621.044:7920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530621.058:7921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530621.058:7922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530621.059:7923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530621.087:7924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530621.087:7925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530621.097:7926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530621.097:7927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530621.098:7928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43770 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530621.208:7929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530621.208:7930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530621.224:7931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530621.224:7932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530621.225:7933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530621.280:7934): pid=43800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530621.280:7935): pid=43800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B697675626C676E6B68706777717578716568657A6B74706B6471707070667A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632302E383931313139322D34323631342D33393638343735373632313035392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530621.281:7936): pid=43800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530621.282:7937): pid=43800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530621.584:7938): pid=43800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530621.584:7939): pid=43800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530621.586:7940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530621.586:7941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530621.597:7942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530621.597:7943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530621.598:7944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43804 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530621.617:7945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530621.617:7946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530621.799:7947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530621.799:7948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530621.800:7949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43837 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530621.819:7950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530621.819:7951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530621.828:7952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530621.828:7953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530621.829:7954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43871 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=BPF msg=audit(1748530621.834:7955): prog-id=340 op=LOAD
type=BPF msg=audit(1748530621.834:7956): prog-id=341 op=LOAD
type=SYSCALL msg=audit(1748530621.834:7956): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1ad0 a2=90 a3=0 items=0 ppid=43826 pid=43839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530621.834:7956): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33643938353666646336616264646438623962303532636634
type=BPF msg=audit(1748530621.835:7957): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530621.835:7958): prog-id=342 op=LOAD
type=SYSCALL msg=audit(1748530621.835:7958): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=43826 pid=43839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530621.835:7958): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33643938353666646336616264646438623962303532636634
type=BPF msg=audit(1748530621.835:7959): prog-id=343 op=LOAD
type=SYSCALL msg=audit(1748530621.835:7959): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=43826 pid=43839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530621.835:7959): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33643938353666646336616264646438623962303532636634
type=BPF msg=audit(1748530621.836:7960): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530621.836:7961): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530621.836:7962): prog-id=344 op=LOAD
type=SYSCALL msg=audit(1748530621.836:7962): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=43826 pid=43839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530621.836:7962): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33643938353666646336616264646438623962303532636634
type=USER_END msg=audit(1748530621.850:7963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530621.850:7964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530621.865:7965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530621.865:7966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530621.866:7967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530621.895:7968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530621.896:7969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530621.907:7970): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530621.907:7971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530621.909:7972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43947 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530621.930:7973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530621.930:7974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530621.939:7975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530621.939:7976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530621.940:7977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530621.994:7978): pid=43995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530621.994:7979): pid=43995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D726A767578636E736775757979756D78756A6B717878727463657272746673203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632312E383231303131352D34323631342D3130373633363832353136363830392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530621.994:7980): pid=43995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530621.996:7981): pid=43995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530622.170:7982): pid=43995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530622.170:7983): pid=43995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530622.172:7984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530622.172:7985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530622.183:7986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530622.183:7987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530622.184:7988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=43999 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530622.203:7989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530622.204:7990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530622.412:7991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530622.412:7992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530622.413:7993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44014 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530622.431:7994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530622.431:7995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530622.440:7996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530622.440:7997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530622.441:7998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530622.463:7999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530622.463:8000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530622.477:8001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530622.477:8002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530622.478:8003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530622.510:8004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530622.510:8005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530622.521:8006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530622.521:8007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530622.522:8008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44064 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530622.540:8009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530622.540:8010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530622.551:8011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530622.551:8012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530622.552:8013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44079 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530622.601:8014): pid=44094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530622.601:8015): pid=44094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786B697A6E786C6779726D62697A72756961756D70617975736A726B62647677203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632322E343332383030332D34323631342D3233333435303334303537333639322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530622.601:8016): pid=44094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530622.603:8017): pid=44094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530622.755:8018): pid=44094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530622.755:8019): pid=44094 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530622.758:8020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530622.758:8021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530622.767:8022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530622.767:8023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530622.768:8024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44098 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530622.786:8025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530622.786:8026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530622.974:8027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530622.974:8028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530622.975:8029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530622.993:8030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530622.993:8031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.003:8032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.003:8033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.004:8034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44128 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530623.026:8035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.026:8036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.041:8037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.041:8038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.042:8039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44149 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530623.073:8040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.073:8041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.083:8042): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.083:8043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.084:8044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44166 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530623.105:8045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.105:8046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.116:8047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.116:8048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.117:8049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44181 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530623.169:8050): pid=44196 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530623.169:8051): pid=44196 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776C75746D6178726A6E79776B626C747365667974706B7A6979716476697678203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632322E393935303134322D34323631342D33383335343836303131363439392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530623.169:8052): pid=44196 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530623.171:8053): pid=44196 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530623.321:8054): pid=44196 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530623.322:8055): pid=44196 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530623.324:8056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.324:8057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.333:8058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.333:8059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.334:8060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530623.352:8061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.352:8062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.525:8063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.525:8064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.526:8065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44216 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530623.542:8066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.542:8067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.551:8068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.551:8069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.552:8070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44230 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530623.572:8071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.572:8072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.584:8073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.584:8074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.585:8075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530623.612:8076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.612:8077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.621:8078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.621:8079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.622:8080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530623.640:8081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.640:8082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.649:8083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.649:8084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.650:8085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44280 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530623.698:8086): pid=44295 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530623.698:8087): pid=44295 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E6274636B6E69717475626769716970706A6E767A6A6F7163616363687378203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632332E353434363237372D34323631342D37393133323338353433393134332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530623.699:8088): pid=44295 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530623.700:8089): pid=44295 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530623.850:8090): pid=44295 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530623.850:8091): pid=44295 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530623.853:8092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.853:8093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530623.862:8094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530623.862:8095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530623.863:8096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44299 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530623.881:8097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530623.881:8098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.057:8099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.057:8100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.058:8101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44314 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.075:8102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.075:8103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.084:8104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.084:8105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.085:8106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44328 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.105:8107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.105:8108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.118:8109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.118:8110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.119:8111): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44349 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.146:8112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.146:8113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.156:8114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.156:8115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.157:8116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44363 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.175:8117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.175:8118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.184:8119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.184:8120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.185:8121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44378 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530624.239:8122): pid=44393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530624.239:8123): pid=44393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E7764656765696462726B77676F776F756E6A69687279746B626B72737668203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632342E303737333934372D34323631342D3231333039323635313731333835322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530624.240:8124): pid=44393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530624.241:8125): pid=44393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530624.392:8126): pid=44393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530624.392:8127): pid=44393 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530624.394:8128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.395:8129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.404:8130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.404:8131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.405:8132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44397 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.423:8133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.423:8134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.621:8135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.621:8136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.622:8137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44412 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.639:8138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.639:8139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.647:8140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.647:8141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.648:8142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44426 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.668:8143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.668:8144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.681:8145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.681:8146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.682:8147): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44447 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.709:8148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.709:8149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.719:8150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.719:8151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.719:8152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44461 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.736:8153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.736:8154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.746:8155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.746:8156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.746:8157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44476 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530624.802:8158): pid=44491 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530624.802:8159): pid=44491 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A64676E6370686E726C6A776E67686D63757A6D746E6E79666B636572627670203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632342E363430363337362D34323631342D3134353133363332353432343336312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530624.802:8160): pid=44491 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530624.803:8161): pid=44491 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530624.960:8162): pid=44491 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530624.960:8163): pid=44491 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530624.962:8164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.962:8165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530624.972:8166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530624.972:8167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530624.973:8168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44495 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530624.990:8169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530624.990:8170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.176:8171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.176:8172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.177:8173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44512 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530625.194:8174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.195:8175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.204:8176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.204:8177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.205:8178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44526 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530625.225:8179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.225:8180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.240:8181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.240:8182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.240:8183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44547 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530625.269:8184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.269:8185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.279:8186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.279:8187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.280:8188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530625.297:8189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.297:8190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.307:8191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.307:8192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.308:8193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530625.358:8194): pid=44591 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530625.358:8195): pid=44591 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A68767574677265776A6A656A726662636775796F78697762726D626B6C77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632352E313936353736362D34323631342D3235303639333834323732383038332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530625.358:8196): pid=44591 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530625.360:8197): pid=44591 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530625.513:8198): pid=44591 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530625.514:8199): pid=44591 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530625.517:8200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.517:8201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.526:8202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.526:8203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.527:8204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44595 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530625.546:8205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.546:8206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.743:8207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.743:8208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.744:8209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44610 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530625.760:8210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.760:8211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.769:8212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.769:8213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.770:8214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44624 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530625.791:8215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.791:8216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.805:8217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.805:8218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.806:8219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44645 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530625.835:8220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.835:8221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.846:8222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.846:8223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.847:8224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44659 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530625.867:8225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530625.867:8226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530625.877:8227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530625.877:8228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530625.878:8229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530625.928:8230): pid=44689 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530625.928:8231): pid=44689 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6179617A7A6A716871626A61616B656F68696B67656163656167786474736C77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632352E3736323230392D34323631342D3135363330353539353530303636352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530625.929:8232): pid=44689 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530625.930:8233): pid=44689 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530626.085:8234): pid=44689 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530626.085:8235): pid=44689 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530626.087:8236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.087:8237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.097:8238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.097:8239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.098:8240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530626.116:8241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.116:8242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.314:8243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.314:8244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.315:8245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44708 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530626.334:8246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.334:8247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.343:8248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.343:8249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.344:8250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44722 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530626.365:8251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.365:8252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.378:8253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.378:8254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.379:8255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44743 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530626.406:8256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.406:8257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.416:8258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.416:8259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.417:8260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44757 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530626.434:8261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.434:8262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.443:8263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.443:8264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.444:8265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530626.493:8266): pid=44787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530626.493:8267): pid=44787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C676E75616C70626965637466707165676A66616E617470737A787264616A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632362E333335373835342D34323631342D3236393531393635323233333139352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530626.494:8268): pid=44787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530626.495:8269): pid=44787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530626.644:8270): pid=44787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530626.645:8271): pid=44787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530626.647:8272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.647:8273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.656:8274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.656:8275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.657:8276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44791 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530626.681:8277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.681:8278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.868:8279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.868:8280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.869:8281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44806 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530626.891:8282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.891:8283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.900:8284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.900:8285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.901:8286): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530626.927:8287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.927:8288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.942:8289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.942:8290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.942:8291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44841 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530626.972:8292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530626.972:8293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530626.983:8294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530626.983:8295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530626.983:8296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530627.004:8297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530627.004:8298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530627.016:8299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530627.016:8300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530627.017:8301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530627.071:8302): pid=44936 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530627.071:8303): pid=44936 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7964766C7064767964687961666F75756B69716D776169676971766173767372203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632362E38393330352D34323631342D3236393132303539363538363937322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530627.072:8304): pid=44936 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530627.073:8305): pid=44936 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530627.229:8306): pid=44936 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530627.229:8307): pid=44936 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530627.233:8308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530627.233:8309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530627.245:8310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530627.245:8311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530627.247:8312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44955 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530627.293:8313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530627.293:8314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530627.482:8315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530627.482:8316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530627.483:8317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44972 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530627.502:8318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530627.502:8319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530627.511:8320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530627.511:8321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530627.512:8322): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=44988 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530627.549:8323): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530627.549:8324): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530627.562:8325): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530627.562:8326): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530627.563:8327): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530627.622:8328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530627.622:8329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530627.634:8330): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530627.634:8331): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530627.636:8332): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530627.662:8333): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530627.662:8334): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530627.674:8335): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530627.674:8336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530627.681:8337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45040 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530627.777:8338): pid=45055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530627.777:8339): pid=45055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697466646A79767775616D6267616C75686967776F63726B63637079787A6577203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632372E353033343635322D34323631342D31393932353934323334333433382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530627.777:8340): pid=45055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530627.784:8341): pid=45055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530627.973:8342): pid=45055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530627.973:8343): pid=45055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530627.975:8344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530627.975:8345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530627.989:8346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530627.989:8347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530627.990:8348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45061 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530628.037:8349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530628.037:8350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530628.262:8351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530628.262:8352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530628.263:8353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45078 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530628.280:8354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530628.280:8355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530628.290:8356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530628.290:8357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530628.291:8358): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45092 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530628.314:8359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530628.314:8360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530628.328:8361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530628.328:8362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530628.329:8363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530628.375:8364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530628.375:8365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530628.390:8366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530628.390:8367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530628.391:8368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45127 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530628.418:8369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530628.418:8370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530628.429:8371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530628.429:8372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530628.433:8373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45143 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530628.497:8374): pid=45160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530628.497:8375): pid=45160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A777779626E6F6F756D7379706162706A6271786D696E617A626F656E756769203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632382E323831393932322D34323631342D34373830383539393637373939322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530628.497:8376): pid=45160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530628.499:8377): pid=45160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530628.671:8378): pid=45160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530628.672:8379): pid=45160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530628.677:8380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530628.677:8381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530628.687:8382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530628.688:8383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530628.689:8384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530628.726:8385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530628.726:8386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530628.921:8387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530628.921:8388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530628.922:8389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45180 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530628.939:8390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530628.940:8391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530628.950:8392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530628.950:8393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530628.951:8394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530628.990:8395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530628.990:8396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530629.003:8397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530629.006:8398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530629.008:8399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45215 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530629.067:8400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530629.067:8401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530629.078:8402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530629.078:8403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530629.080:8404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45229 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530629.120:8405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530629.120:8406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530629.130:8407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530629.132:8408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530629.133:8409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45244 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530629.215:8410): pid=45259 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530629.215:8411): pid=45259 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7579786D637A6270677463756763677870796E6E66716E6A637071776C776279203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632382E393431303934362D34323631342D3136373531333031363634393137332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530629.216:8412): pid=45259 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530629.220:8413): pid=45259 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530629.398:8414): pid=45259 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530629.399:8415): pid=45259 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530629.401:8416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530629.401:8417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530629.414:8418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530629.414:8419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530629.415:8420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45263 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530629.452:8421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530629.452:8422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530629.676:8423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530629.676:8424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530629.677:8425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45278 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530629.695:8426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530629.695:8427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530629.712:8428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530629.712:8429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530629.713:8430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45292 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530629.767:8431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530629.767:8432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530629.782:8433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530629.787:8434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530629.790:8435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45313 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530629.856:8436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530629.856:8437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530629.873:8438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530629.873:8439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530629.874:8440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45328 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530629.911:8441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530629.911:8442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530629.926:8443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530629.926:8444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530629.930:8445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45343 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530630.015:8446): pid=45358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530630.015:8447): pid=45358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D646874776F6D666D79656F6673796571696D716C6F786C69767171676F6B6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303632392E363936392D34323631342D3137373031323939313139323737382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530630.015:8448): pid=45358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530630.018:8449): pid=45358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530630.247:8450): pid=45358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530630.247:8451): pid=45358 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530630.249:8452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530630.249:8453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530630.259:8454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530630.259:8455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530630.260:8456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530630.307:8457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530630.307:8458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530630.510:8459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530630.510:8460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530630.513:8461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45380 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530630.559:8462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530630.559:8463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530630.569:8464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530630.569:8465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530630.572:8466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45394 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530630.625:8467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530630.625:8468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530630.639:8469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530630.639:8470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530630.643:8471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45415 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530630.710:8472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530630.710:8473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530630.724:8474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530630.724:8475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530630.727:8476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45429 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530630.765:8477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530630.765:8478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530630.779:8479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530630.779:8480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530630.782:8481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45444 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530630.855:8482): pid=45459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530630.855:8483): pid=45459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656673786F637264627963776B74696C6B6E73666661756872716B7A726F7164203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633302E3536313133322D34323631342D3237363232373832393030383931382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530630.855:8484): pid=45459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530630.860:8485): pid=45459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530631.047:8486): pid=45459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530631.047:8487): pid=45459 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530631.049:8488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530631.049:8489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530631.061:8490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530631.061:8491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530631.063:8492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45463 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530631.108:8493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530631.109:8494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530631.335:8495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530631.335:8496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530631.338:8497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45478 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530631.382:8498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530631.382:8499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530631.391:8500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530631.391:8501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530631.391:8502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45492 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530631.443:8503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530631.443:8504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530631.456:8505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530631.456:8506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530631.459:8507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45513 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530631.504:8508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530631.508:8509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530631.518:8510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530631.518:8511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530631.520:8512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530631.550:8513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530631.550:8514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530631.562:8515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530631.562:8516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530631.563:8517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530631.636:8518): pid=45557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530631.636:8519): pid=45557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F626975756567796C786D76716A66786C617865766B6B6D64636163686C74203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633312E333833393036362D34323631342D3232343034393631393736333031342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530631.637:8520): pid=45557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530631.639:8521): pid=45557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530631.820:8522): pid=45557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530631.821:8523): pid=45557 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530631.826:8524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530631.826:8525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530631.836:8526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530631.836:8527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530631.840:8528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530631.882:8529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530631.882:8530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530632.092:8531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530632.092:8532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530632.094:8533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530632.119:8534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530632.119:8535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530632.129:8536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530632.129:8537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530632.131:8538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530632.179:8539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530632.179:8540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530632.196:8541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530632.196:8542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530632.197:8543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45611 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530632.254:8544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530632.254:8545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530632.268:8546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530632.268:8547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530632.270:8548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45625 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530632.314:8549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530632.314:8550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530632.324:8551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530632.327:8552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530632.328:8553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45641 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530632.421:8554): pid=45656 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530632.421:8555): pid=45656 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D72756A6B7670616478786A62656A6B6A786D79747364696A656A746D6373203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633322E313137393832392D34323631342D3137303134363833363230393137362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530632.422:8556): pid=45656 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530632.424:8557): pid=45656 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530632.613:8558): pid=45656 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530632.613:8559): pid=45656 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530632.615:8560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530632.615:8561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530632.626:8562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530632.626:8563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530632.627:8564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45662 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530632.646:8565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530632.646:8566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530632.851:8567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530632.851:8568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530632.852:8569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45677 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530632.874:8570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530632.874:8571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530632.883:8572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530632.883:8573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530632.884:8574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45691 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530632.919:8575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530632.919:8576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530632.929:8577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530632.930:8578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530632.931:8579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45712 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530632.996:8580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530632.996:8581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530633.006:8582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530633.006:8583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530633.008:8584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45726 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530633.025:8585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530633.026:8586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530633.036:8587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530633.036:8588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530633.037:8589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45741 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530633.094:8590): pid=45756 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530633.094:8591): pid=45756 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B7371626464746761697A73757163706C6663796A6167647268636D736D6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633322E383735383536392D34323631342D31303737303434373637343731302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530633.095:8592): pid=45756 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530633.097:8593): pid=45756 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530633.271:8594): pid=45756 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530633.271:8595): pid=45756 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530633.274:8596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530633.274:8597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530633.285:8598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530633.285:8599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530633.286:8600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45760 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530633.313:8601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530633.313:8602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530633.528:8603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530633.528:8604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530633.531:8605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45775 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530633.562:8606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530633.563:8607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530633.571:8608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530633.571:8609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530633.573:8610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530633.608:8611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530633.608:8612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530633.622:8613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530633.622:8614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530633.623:8615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530633.668:8616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530633.668:8617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530633.678:8618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530633.679:8619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530633.680:8620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45824 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530633.716:8621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530633.716:8622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530633.729:8623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530633.729:8624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530633.732:8625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45839 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530633.799:8626): pid=45855 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530633.799:8627): pid=45855 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6177727372786D74766275676867696873726171676F677576796B7173626C68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633332E353633383830342D34323631342D3139323234383039353634333335312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530633.800:8628): pid=45855 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530633.802:8629): pid=45855 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530633.984:8630): pid=45855 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530633.984:8631): pid=45855 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530633.987:8632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530633.988:8633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530633.998:8634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530633.998:8635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530633.999:8636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45863 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530634.022:8637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530634.022:8638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530634.264:8639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530634.264:8640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530634.266:8641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45882 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530634.287:8642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530634.287:8643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530634.300:8644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530634.300:8645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530634.303:8646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45896 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530634.347:8647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530634.347:8648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530634.357:8649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530634.357:8650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530634.360:8651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530634.402:8652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530634.402:8653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530634.420:8654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530634.423:8655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530634.426:8656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530634.447:8657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530634.447:8658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530634.457:8659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530634.457:8660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530634.458:8661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45949 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530634.526:8662): pid=45964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530634.526:8663): pid=45964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7079667A6B6C6964756C79626A656C796F636964666A7A6F796279626A7264203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633342E323839313336362D34323631342D38313432303431313934373033392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530634.527:8664): pid=45964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530634.529:8665): pid=45964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530634.692:8666): pid=45964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530634.692:8667): pid=45964 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530634.698:8668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530634.698:8669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530634.707:8670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530634.707:8671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530634.710:8672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45971 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530634.731:8673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530634.731:8674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.161:8675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.161:8676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.164:8677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=45993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530635.181:8678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530635.181:8679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.190:8680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.190:8681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.191:8682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46007 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530635.226:8683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530635.226:8684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.348:8685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.348:8686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.350:8687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530635.394:8688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530635.394:8689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.407:8690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.407:8691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.408:8692): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46042 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530635.428:8693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530635.428:8694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.439:8695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.439:8696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.440:8697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46057 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530635.502:8698): pid=46072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530635.503:8699): pid=46072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D72756F726C6B6C6A66717262707569787A6E72707A6C626876616E6B6F6661203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633352E313832393439332D34353938392D32303835363232373830313838372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530635.503:8700): pid=46072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530635.505:8701): pid=46072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530635.673:8702): pid=46072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530635.673:8703): pid=46072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530635.676:8704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530635.677:8705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.690:8706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.690:8707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.692:8708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46077 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530635.730:8709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530635.730:8710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.739:8711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.739:8712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.740:8713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46091 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530635.762:8714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530635.762:8715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.776:8716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.776:8717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.777:8718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46107 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530635.812:8719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530635.812:8720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.822:8721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.822:8722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.823:8723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46121 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530635.858:8724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530635.858:8725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530635.868:8726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530635.868:8727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530635.869:8728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46136 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530635.929:8729): pid=46151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530635.929:8730): pid=46151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D64756C796874626B7262656D627977706B756A61726373676477746479656D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633352E313832393439332D34353938392D32303835363232373830313838372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530635.929:8731): pid=46151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530635.932:8732): pid=46151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530636.099:8733): pid=46151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530636.099:8734): pid=46151 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530636.101:8735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530636.102:8736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530636.112:8737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530636.113:8738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530636.113:8739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46155 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530636.134:8740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530636.134:8741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530636.403:8742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530636.404:8743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530636.405:8744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46172 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530636.437:8745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530636.437:8746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530636.448:8747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530636.448:8748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530636.449:8749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46190 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530636.480:8750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530636.480:8751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530636.503:8752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530636.503:8753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530636.506:8754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46211 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530636.549:8755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530636.549:8756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530636.562:8757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530636.562:8758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530636.563:8759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46227 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530636.599:8760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530636.599:8761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530636.609:8762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530636.609:8763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530636.610:8764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46242 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530636.706:8765): pid=46257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530636.706:8766): pid=46257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797761676A686E6464717A666B6366786F6862626E6D696379626B7A67766271203B2068747470735F70726F78793D272720687474705F70726F78793D272720444F434B45525F434C49454E545F54494D454F55543D31323020434F4D504F53455F485454505F54494D454F55543D313230202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633362E343339313032322D34363137302D3136393234333336373636363833312F416E736962616C6C5A5F646F636B65725F636F6D706F73652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530636.707:8767): pid=46257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530636.708:8768): pid=46257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530637.443:8769): prog-id=345 op=LOAD
type=SYSCALL msg=audit(1748530637.443:8769): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=46296 pid=46308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.443:8769): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37313965313239393030396266373561643161393539663264
type=BPF msg=audit(1748530637.443:8770): prog-id=346 op=LOAD
type=SYSCALL msg=audit(1748530637.443:8770): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=46296 pid=46308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.443:8770): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37313965313239393030396266373561643161393539663264
type=BPF msg=audit(1748530637.443:8771): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530637.443:8772): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530637.443:8773): prog-id=347 op=LOAD
type=SYSCALL msg=audit(1748530637.443:8773): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=46296 pid=46308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.443:8773): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37313965313239393030396266373561643161393539663264
type=BPF msg=audit(1748530637.656:8774): prog-id=348 op=LOAD
type=BPF msg=audit(1748530637.657:8775): prog-id=349 op=LOAD
type=SYSCALL msg=audit(1748530637.657:8775): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125ad0 a2=90 a3=0 items=0 ppid=46395 pid=46417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.657:8775): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343331633032353736623533636235373734343733656363
type=BPF msg=audit(1748530637.659:8776): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530637.659:8777): prog-id=350 op=LOAD
type=SYSCALL msg=audit(1748530637.659:8777): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125c48 a2=90 a3=0 items=0 ppid=46395 pid=46417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.659:8777): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343331633032353736623533636235373734343733656363
type=BPF msg=audit(1748530637.659:8778): prog-id=351 op=LOAD
type=SYSCALL msg=audit(1748530637.659:8778): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001259d8 a2=90 a3=0 items=0 ppid=46395 pid=46417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.659:8778): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343331633032353736623533636235373734343733656363
type=BPF msg=audit(1748530637.659:8779): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530637.659:8780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530637.659:8781): prog-id=352 op=LOAD
type=SYSCALL msg=audit(1748530637.659:8781): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125eb0 a2=90 a3=0 items=0 ppid=46395 pid=46417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.659:8781): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343331633032353736623533636235373734343733656363
type=BPF msg=audit(1748530637.771:8782): prog-id=353 op=LOAD
type=BPF msg=audit(1748530637.771:8783): prog-id=354 op=LOAD
type=SYSCALL msg=audit(1748530637.771:8783): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=46431 pid=46482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.771:8783): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306230643065616461623136636265666533366137663338
type=BPF msg=audit(1748530637.772:8784): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530637.772:8785): prog-id=355 op=LOAD
type=SYSCALL msg=audit(1748530637.772:8785): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=46431 pid=46482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.772:8785): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306230643065616461623136636265666533366137663338
type=BPF msg=audit(1748530637.772:8786): prog-id=356 op=LOAD
type=SYSCALL msg=audit(1748530637.772:8786): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=46431 pid=46482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.772:8786): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306230643065616461623136636265666533366137663338
type=BPF msg=audit(1748530637.772:8787): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530637.772:8788): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530637.772:8789): prog-id=357 op=LOAD
type=SYSCALL msg=audit(1748530637.772:8789): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=46431 pid=46482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530637.772:8789): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64306230643065616461623136636265666533366137663338
type=USER_END msg=audit(1748530637.930:8790): pid=46257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530637.930:8791): pid=46257 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530637.934:8792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530637.934:8793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530637.944:8794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530637.944:8795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530637.945:8796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=46650 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530637.976:8797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530637.976:8798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=BPF msg=audit(1748530638.460:8799): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1748530638.545:8800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530638.545:8801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530638.546:8802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47060 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530638.565:8803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530638.565:8804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530638.578:8805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530638.578:8806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530638.582:8807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47074 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530638.610:8808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530638.611:8809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530638.624:8810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530638.627:8811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530638.627:8812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530638.659:8813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530638.659:8814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530638.670:8815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530638.670:8816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530638.674:8817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530638.696:8818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530638.696:8819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530638.708:8820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530638.710:8821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530638.711:8822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530638.805:8823): pid=47141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530638.805:8824): pid=47141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A617276676B796778626D71676C6A62736C66747A776862656B6473746861203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633382E353639343731362D34363835392D3234313034383537323634323836342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530638.806:8825): pid=47141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530638.810:8826): pid=47141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530639.119:8827): pid=47141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530639.120:8828): pid=47141 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530639.122:8829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530639.122:8830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530639.132:8831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530639.132:8832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530639.133:8833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47164 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530639.160:8834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530639.160:8835): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530639.382:8836): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530639.382:8837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530639.383:8838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530639.416:8839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530639.416:8840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530639.428:8841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530639.428:8842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530639.429:8843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47287 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530639.449:8844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530639.449:8845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530639.465:8846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530639.466:8847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530639.467:8848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47312 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530639.527:8849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530639.527:8850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530639.539:8851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530639.539:8852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530639.543:8853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47326 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530639.581:8854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530639.581:8855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530639.590:8856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530639.594:8857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530639.595:8858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47341 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530639.677:8859): pid=47356 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530639.677:8860): pid=47356 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756A69656B676D687278786E666A727A7362647664626669786B7A7867706B79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303633392E343137373830392D34363835392D3138343032363732313530323933312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530639.678:8861): pid=47356 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530639.684:8862): pid=47356 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530639.987:8863): pid=47356 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530639.988:8864): pid=47356 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530639.990:8865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530639.990:8866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530640.000:8867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530640.000:8868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530640.000:8869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47369 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530640.032:8870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530640.032:8871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530640.287:8872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530640.287:8873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530640.288:8874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530640.310:8875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530640.310:8876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530640.319:8877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530640.319:8878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530640.320:8879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530640.350:8880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530640.350:8881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530640.365:8882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530640.365:8883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530640.367:8884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530640.395:8885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530640.395:8886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530640.407:8887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530640.407:8888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530640.410:8889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47433 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530640.437:8890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530640.437:8891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530640.449:8892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530640.449:8893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530640.452:8894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47448 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530640.510:8895): pid=47463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530640.510:8896): pid=47463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F6E776B6F706366626E757473726D6867696F66757A716668637672796D68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303634302E3331323139312D34363835392D3139323639353936363936323538322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530640.510:8897): pid=47463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530640.513:8898): pid=47463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530657.160:8899): pid=47463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530657.161:8900): pid=47463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530657.164:8901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530657.169:8902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530657.176:8903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530657.177:8904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530657.177:8905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530657.198:8906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530657.198:8907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530657.443:8908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530657.443:8909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530657.444:8910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47793 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530657.462:8911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530657.462:8912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530657.471:8913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530657.471:8914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530657.473:8915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47807 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530657.493:8916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530657.498:8917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530657.507:8918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530657.507:8919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530657.508:8920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530657.543:8921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530657.543:8922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530657.558:8923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530657.558:8924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530657.559:8925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47842 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530657.580:8926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530657.580:8927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530657.591:8928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530657.592:8929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530657.593:8930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47857 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530657.643:8931): pid=47872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530657.643:8932): pid=47872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A7275716D686F65716D7A71696D787064736B67636672667568676B787073203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303635372E343633343330342D34363835392D3235383330343831303233363839362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530657.643:8933): pid=47872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530657.646:8934): pid=47872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530658.062:8935): pid=47872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530658.063:8936): pid=47872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530658.065:8937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530658.065:8938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530658.076:8939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530658.077:8940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530658.078:8941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47901 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530658.098:8942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530658.098:8943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530658.319:8944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530658.319:8945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530658.320:8946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47916 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530658.339:8947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530658.339:8948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530658.348:8949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530658.348:8950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530658.349:8951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530658.369:8952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530658.369:8953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530658.383:8954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530658.383:8955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530658.384:8956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47951 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530658.418:8957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530658.418:8958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530658.432:8959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530658.432:8960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530658.433:8961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47965 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530658.456:8962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530658.456:8963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530658.467:8964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530658.467:8965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530658.468:8966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=47980 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530658.524:8967): pid=47995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530658.524:8968): pid=47995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736369766B6F7163787664726A6B676B6E737269696170797979707A6A70796A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303635382E333430373039322D34363835392D3139363232373535333132393136322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530658.524:8969): pid=47995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530658.527:8970): pid=47995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530658.962:8971): pid=47995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530658.962:8972): pid=47995 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530658.964:8973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530658.964:8974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530658.975:8975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530658.975:8976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530658.976:8977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48024 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530658.995:8978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530658.995:8979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530659.275:8980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530659.275:8981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530659.277:8982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530659.296:8983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530659.296:8984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530659.305:8985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530659.305:8986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530659.306:8987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48059 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530659.327:8988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530659.327:8989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530659.341:8990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530659.341:8991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530659.343:8992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48080 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530659.372:8993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530659.372:8994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530659.384:8995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530659.384:8996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530659.384:8997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48094 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530659.402:8998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530659.402:8999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530659.412:9000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530659.412:9001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530659.413:9002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530659.464:9003): pid=48124 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530659.464:9004): pid=48124 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666F6A737163637270646A6676767673726C716A6777756C726166787A686E68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303635392E323937323531372D34363835392D3237333231373030333035303239362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530659.465:9005): pid=48124 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530659.466:9006): pid=48124 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530659.970:9007): pid=48124 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530659.970:9008): pid=48124 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530659.972:9009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530659.973:9010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530659.983:9011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530659.984:9012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530659.984:9013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530660.005:9014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530660.006:9015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530660.264:9016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530660.264:9017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530660.265:9018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530660.282:9019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530660.282:9020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530660.292:9021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530660.292:9022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530660.293:9023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530660.318:9024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530660.319:9025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530660.336:9026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530660.337:9027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530660.338:9028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530660.407:9029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530660.407:9030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530660.419:9031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530660.420:9032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530660.421:9033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48214 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530660.439:9034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530660.439:9035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530660.451:9036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530660.451:9037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530660.452:9038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48229 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530660.500:9039): pid=48244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530660.500:9040): pid=48244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F6D697169696570717368737369646D78777477796E7863646D7A786D6C63203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636302E323834353631342D34383136332D3232303031383837393931363230382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530660.501:9041): pid=48244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530660.505:9042): pid=48244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530660.696:9043): pid=48244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530660.697:9044): pid=48244 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530660.699:9045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530660.699:9046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530660.710:9047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530660.710:9048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530660.711:9049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530660.786:9050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530660.786:9051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530661.027:9052): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530661.028:9053): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530661.032:9054): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530661.051:9055): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530661.051:9056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530661.057:9057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530661.057:9058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530661.059:9059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530661.114:9060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530661.114:9061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530661.132:9062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530661.132:9063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530661.133:9064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530661.211:9065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530661.211:9066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530661.223:9067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530661.223:9068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530661.224:9069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530661.247:9070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530661.247:9071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530661.258:9072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530661.259:9073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530661.260:9074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48342 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530661.317:9075): pid=48357 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530661.317:9076): pid=48357 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716565716975706772626D6F77646D717172726579706D74796674666F6B6F67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636312E303439303938332D34383237302D3137343933373438383738373534342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530661.318:9077): pid=48357 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530661.320:9078): pid=48357 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530661.536:9079): pid=48357 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530661.538:9080): pid=48357 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530661.540:9081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530661.540:9082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530661.551:9083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530661.551:9084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530661.553:9085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48367 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530661.576:9086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530661.577:9087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530661.854:9088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530661.854:9089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530661.855:9090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48386 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530661.880:9091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530661.880:9092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530661.889:9093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530661.890:9094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530661.891:9095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48400 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530661.941:9096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530661.941:9097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530661.956:9098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530661.956:9099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530661.957:9100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48421 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530662.002:9101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530662.002:9102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530662.015:9103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530662.015:9104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530662.015:9105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530662.081:9106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530662.081:9107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530662.092:9108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530662.092:9109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530662.093:9110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48450 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530662.154:9111): pid=48465 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530662.154:9112): pid=48465 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77776A6677796D6D7271617768766375747A61666168786165796E7A64627270203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636312E383832303336322D34383338342D39343032323235373534343831342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530662.155:9113): pid=48465 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530662.157:9114): pid=48465 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530662.345:9115): pid=48465 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530662.346:9116): pid=48465 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530662.348:9117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530662.348:9118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530662.359:9119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530662.359:9120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530662.360:9121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48477 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530662.379:9122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530662.379:9123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530662.920:9124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530662.920:9125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530662.921:9126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48514 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530662.940:9127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530662.940:9128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530662.950:9129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530662.950:9130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530662.951:9131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48528 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530662.972:9132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530662.972:9133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530662.986:9134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530662.987:9135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530662.988:9136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48549 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530663.021:9137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.021:9138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530663.032:9139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530663.032:9140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530663.033:9141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48563 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530663.051:9142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.051:9143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530663.062:9144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530663.062:9145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530663.063:9146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48578 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530663.113:9147): pid=48593 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530663.113:9148): pid=48593 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76677973746862716B6578756B6178766A707A76757876716B716D6961676174203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636322E393431383036362D34383530362D3133373130373238323830333731392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530663.113:9149): pid=48593 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530663.115:9150): pid=48593 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530663.290:9151): pid=48593 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530663.290:9152): pid=48593 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530663.293:9153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.293:9154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530663.304:9155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530663.305:9156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530663.306:9157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48597 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530663.326:9158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.326:9159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530663.536:9160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530663.537:9161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530663.538:9162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530663.556:9163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.556:9164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530663.565:9165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530663.565:9166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530663.566:9167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530663.590:9168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.593:9169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530663.604:9170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530663.604:9171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530663.606:9172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530663.634:9173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.634:9174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530663.645:9175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530663.645:9176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530663.647:9177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530663.666:9178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.666:9179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530663.676:9180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530663.676:9181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530663.677:9182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48689 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530663.726:9183): pid=48704 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530663.727:9184): pid=48704 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7261627A77617866696270777672757579677275696974737463646E69657A69203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636332E353537373430372D34383530362D3236333638363333313532353631342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530663.727:9185): pid=48704 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530663.729:9186): pid=48704 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530663.880:9187): pid=48704 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530663.881:9188): pid=48704 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530663.883:9189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.884:9190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530663.894:9191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530663.894:9192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530663.895:9193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48708 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530663.913:9194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530663.913:9195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.095:9196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.095:9197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.096:9198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48723 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530664.116:9199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.117:9200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.126:9201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.126:9202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.128:9203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530664.148:9204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.148:9205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.162:9206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.162:9207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.163:9208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48760 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530664.198:9209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.198:9210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.212:9211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.212:9212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.213:9213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530664.233:9214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.233:9215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.243:9216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.244:9217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.245:9218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48793 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530664.294:9219): pid=48808 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530664.294:9220): pid=48808 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C74676F6F646A72706C676E70626C63626F6D6962616F6872726B6D777775203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636342E3131383333372D34383530362D32333933343838343536383333362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530664.294:9221): pid=48808 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530664.296:9222): pid=48808 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530664.447:9223): pid=48808 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530664.448:9224): pid=48808 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530664.450:9225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.451:9226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.461:9227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.461:9228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.462:9229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48812 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530664.481:9230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.481:9231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.684:9232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.684:9233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.685:9234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48833 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530664.705:9235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.705:9236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.714:9237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.714:9238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.715:9239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48847 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530664.738:9240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.738:9241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.753:9242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.753:9243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.754:9244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530664.783:9245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.783:9246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.793:9247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.793:9248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.794:9249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48882 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530664.812:9250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530664.812:9251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530664.822:9252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530664.822:9253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530664.823:9254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530664.873:9255): pid=48914 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530664.874:9256): pid=48914 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68696168706A63726473766B78696369766767686C636166706D766770646E67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636342E373036323332332D34383530362D3237343333383337393034313636332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530664.874:9257): pid=48914 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530664.879:9258): pid=48914 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530665.034:9259): pid=48914 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530665.034:9260): pid=48914 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530665.036:9261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.036:9262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.048:9263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.048:9264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.049:9265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48922 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.071:9266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.071:9267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.264:9268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.264:9269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.266:9270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48939 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.283:9271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.283:9272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.292:9273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.292:9274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.295:9275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48953 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.314:9276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.314:9277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.328:9278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.328:9279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.329:9280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48974 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.359:9281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.359:9282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.370:9283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.370:9284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.371:9285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=48988 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.390:9286): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.390:9287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.400:9288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.400:9289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.401:9290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49003 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530665.451:9291): pid=49018 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530665.451:9292): pid=49018 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D70707775796367626568706162666A77727467716D68656E676E7371657764203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636352E323834353539372D34383530362D3236373538323831303031303238352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530665.452:9293): pid=49018 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530665.453:9294): pid=49018 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530665.621:9295): pid=49018 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530665.621:9296): pid=49018 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530665.623:9297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.624:9298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.634:9299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.634:9300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.635:9301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49032 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.653:9302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.653:9303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.833:9304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.833:9305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.834:9306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49051 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.855:9307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.856:9308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.865:9309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.865:9310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.866:9311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49065 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.887:9312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.887:9313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.902:9314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.902:9315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.903:9316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49086 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.932:9317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.932:9318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.943:9319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.943:9320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.944:9321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49100 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530665.962:9322): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530665.963:9323): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530665.973:9324): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530665.973:9325): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530665.974:9326): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49115 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530666.024:9327): pid=49130 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530666.024:9328): pid=49130 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6673706D6E73616C6A627A6C786A6E6267696B786C61716361727265616D6774203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636352E383537353233372D34383530362D3132343035343138333339363130332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530666.025:9329): pid=49130 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530666.026:9330): pid=49130 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530666.180:9331): pid=49130 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530666.181:9332): pid=49130 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530666.184:9333): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530666.185:9334): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530666.195:9335): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530666.195:9336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530666.196:9337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49136 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530666.214:9338): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530666.215:9339): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530666.415:9340): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530666.415:9341): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530666.416:9342): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49155 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530666.435:9343): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530666.435:9344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530666.444:9345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530666.444:9346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530666.446:9347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49169 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530666.466:9348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530666.466:9349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530666.482:9350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530666.482:9351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530666.483:9352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49190 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530666.512:9353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530666.512:9354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530666.525:9355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530666.526:9356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530666.527:9357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530666.549:9358): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530666.549:9359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530666.561:9360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530666.561:9361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530666.562:9362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530666.613:9363): pid=49234 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530666.614:9364): pid=49234 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6372666171767973736375766E6B6F776761706B6D676F6971716B6D6B71736A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636362E3433363933322D34383530362D38343335353438393635313730352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530666.614:9365): pid=49234 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530666.616:9366): pid=49234 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530666.769:9367): pid=49234 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530666.769:9368): pid=49234 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530666.771:9369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530666.773:9370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530666.782:9371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530666.782:9372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530666.783:9373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49244 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530666.805:9374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530666.805:9375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.035:9376): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.035:9377): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.036:9378): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530667.055:9379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.055:9380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.064:9381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.064:9382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.065:9383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49279 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530667.093:9384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.093:9385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.107:9386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.107:9387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.108:9388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530667.139:9389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.139:9390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.150:9391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.150:9392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.151:9393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49314 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530667.168:9394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.168:9395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.179:9396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.179:9397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.180:9398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49329 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530667.231:9399): pid=49344 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530667.231:9400): pid=49344 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A746D646369776C67786D6C6F777A6A706D6C6871637868616E78756D6E63203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636372E303536353035322D34383530362D3136323938353037323738303930332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530667.231:9401): pid=49344 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530667.233:9402): pid=49344 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530667.385:9403): pid=49344 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530667.385:9404): pid=49344 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530667.387:9405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.389:9406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.399:9407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.400:9408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.400:9409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49348 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530667.418:9410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.418:9411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.615:9412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.615:9413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.616:9414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49369 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530667.634:9415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.634:9416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.644:9417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.644:9418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.646:9419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530667.669:9420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.669:9421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.684:9422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.684:9423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.685:9424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49405 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530667.715:9425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.715:9426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.727:9427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.727:9428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.728:9429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530667.747:9430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.747:9431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.758:9432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.758:9433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.759:9434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49434 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530667.807:9435): pid=49449 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530667.807:9436): pid=49449 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697778696F676E6E656577756E6A616E796873637261726F6766666B7279786F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636372E363336333938382D34383530362D37333636353534333933323933362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530667.807:9437): pid=49449 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530667.809:9438): pid=49449 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530667.971:9439): pid=49449 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530667.971:9440): pid=49449 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530667.974:9441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530667.974:9442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530667.985:9443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530667.985:9444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530667.986:9445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49459 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.005:9446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.005:9447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.214:9448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.214:9449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.215:9450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.232:9451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.233:9452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.241:9453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.241:9454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.242:9455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.265:9456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.265:9457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.280:9458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.281:9459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.282:9460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49515 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.309:9461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.309:9462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.320:9463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.320:9464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.321:9465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49529 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.340:9466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.340:9467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.350:9468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.350:9469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.351:9470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49544 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530668.403:9471): pid=49559 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530668.404:9472): pid=49559 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A64746B677A77747968647865767769627463616A7363727677696A6461667A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636382E323334303531322D34383530362D36313034303031313439363639342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530668.404:9473): pid=49559 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530668.405:9474): pid=49559 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530668.584:9475): pid=49559 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530668.585:9476): pid=49559 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530668.588:9477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.588:9478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.611:9479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.611:9480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.613:9481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49563 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.636:9482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.637:9483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.845:9484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.845:9485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.846:9486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49580 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.866:9487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.866:9488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.874:9489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.874:9490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.876:9491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49598 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.902:9492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.902:9493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.916:9494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.916:9495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.917:9496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.948:9497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.949:9498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.960:9499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.960:9500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.961:9501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530668.979:9502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530668.979:9503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530668.989:9504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530668.989:9505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530668.990:9506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49654 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530669.044:9507): pid=49669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530669.044:9508): pid=49669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656B786C786770706773676C6B796A7A7670646576706B6D6E77657668776578203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636382E383637333439392D34383530362D3130393831373231313031353732342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530669.045:9509): pid=49669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530669.046:9510): pid=49669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530669.197:9511): pid=49669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530669.197:9512): pid=49669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530669.200:9513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530669.200:9514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530669.211:9515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530669.212:9516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530669.213:9517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49673 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530669.230:9518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530669.230:9519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530669.427:9520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530669.427:9521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530669.428:9522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49688 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530669.447:9523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530669.447:9524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530669.456:9525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530669.456:9526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530669.457:9527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49702 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530669.477:9528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530669.477:9529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530669.490:9530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530669.490:9531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530669.491:9532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49724 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530669.518:9533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530669.518:9534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530669.529:9535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530669.529:9536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530669.530:9537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530669.551:9538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530669.551:9539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530669.561:9540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530669.562:9541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530669.563:9542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49758 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530669.616:9543): pid=49773 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530669.616:9544): pid=49773 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C747379627761777769616672637666616A6D64686F7865786E7362616E7278203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303636392E3434383937332D34383530362D3236363930353633383536363734382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530669.617:9545): pid=49773 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530669.618:9546): pid=49773 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530669.781:9547): pid=49773 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530669.781:9548): pid=49773 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530669.784:9549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530669.784:9550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530669.797:9551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530669.797:9552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530669.798:9553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49777 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530669.818:9554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530669.818:9555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.019:9556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.020:9557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.021:9558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49798 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530670.038:9559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.039:9560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.047:9561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.048:9562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.048:9563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49812 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530670.071:9564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.071:9565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.087:9566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.087:9567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.088:9568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49833 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530670.117:9569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.117:9570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.128:9571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.128:9572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.129:9573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49847 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530670.148:9574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.148:9575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.166:9576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.166:9577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.168:9578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49863 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530670.219:9579): pid=49879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530670.219:9580): pid=49879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686A766C76787071727A7569756A7868687771687A69647272696465617A7973203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637302E303430303332362D34383530362D3136373831353030383837383335322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530670.220:9581): pid=49879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530670.222:9582): pid=49879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530670.375:9583): pid=49879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530670.376:9584): pid=49879 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530670.378:9585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.379:9586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.389:9587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.389:9588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.390:9589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49887 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530670.409:9590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.409:9591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.615:9592): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.615:9593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.616:9594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49902 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530670.636:9595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.637:9596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.645:9597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.645:9598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.649:9599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49916 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530670.668:9600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.668:9601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.683:9602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.683:9603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.684:9604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49937 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530670.714:9605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.714:9606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.725:9607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.725:9608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.726:9609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49951 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530670.744:9610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.744:9611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.755:9612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.755:9613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.756:9614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49966 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530670.813:9615): pid=49981 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530670.813:9616): pid=49981 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D76656F72716462766F6E68716E6D746F76707677797A646766787775626361203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637302E363337393930322D34383530362D36333436313533383436313339392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530670.813:9617): pid=49981 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530670.815:9618): pid=49981 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530670.976:9619): pid=49981 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530670.977:9620): pid=49981 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530670.979:9621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530670.979:9622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530670.991:9623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530670.991:9624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530670.992:9625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=49993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530671.012:9626): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530671.012:9627): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530671.204:9628): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530671.204:9629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530671.205:9630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50012 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530671.229:9631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530671.229:9632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530671.239:9633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530671.239:9634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530671.242:9635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50026 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530671.265:9636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530671.265:9637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530671.280:9638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530671.280:9639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530671.281:9640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50047 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530671.335:9641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530671.335:9642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530671.348:9643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530671.348:9644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530671.351:9645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50073 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530671.382:9646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530671.382:9647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530671.392:9648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530671.392:9649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530671.393:9650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50092 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530671.487:9651): pid=50107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530671.488:9652): pid=50107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73686868687766686C64777466786E63776868756D676D7866746471706F7A74203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637312E323330343835342D34383530362D3235353834323034383530353231312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530671.488:9653): pid=50107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530671.490:9654): pid=50107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530671.660:9655): pid=50107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530671.660:9656): pid=50107 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530671.663:9657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530671.663:9658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530671.673:9659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530671.673:9660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530671.677:9661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530671.701:9662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530671.701:9663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530671.898:9664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530671.898:9665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530671.902:9666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50169 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530671.925:9667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530671.925:9668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530671.934:9669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530671.934:9670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530671.936:9671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50183 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530671.988:9672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530671.988:9673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530671.998:9674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530671.998:9675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530671.999:9676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530672.040:9677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530672.043:9678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530672.053:9679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530672.053:9680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530672.057:9681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530672.092:9682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530672.092:9683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530672.104:9684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530672.104:9685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530672.105:9686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530672.181:9687): pid=50266 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530672.181:9688): pid=50266 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D796D637475786F636A7A7571637A617A6A66636E626779707272686B6F7064203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637312E3932363938382D34383530362D35393431323333323736333436362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530672.182:9689): pid=50266 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530672.185:9690): pid=50266 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530672.391:9691): pid=50266 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530672.392:9692): pid=50266 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530672.394:9693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530672.394:9694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530672.404:9695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530672.404:9696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530672.405:9697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50285 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530672.433:9698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530672.433:9699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530672.618:9700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530672.618:9701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530672.619:9702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50308 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530672.637:9703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530672.637:9704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530672.646:9705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530672.646:9706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530672.650:9707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50322 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530672.678:9708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530672.678:9709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530672.693:9710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530672.693:9711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530672.694:9712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50343 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530672.731:9713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530672.731:9714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530672.743:9715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530672.743:9716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530672.744:9717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530672.785:9718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530672.785:9719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530672.791:9720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530672.791:9721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530672.794:9722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50372 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530672.870:9723): pid=50406 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530672.871:9724): pid=50406 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676B61707661736D7A6E726F7774706E6B6F756D7365666D6F786B797970636A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637322E363338353433342D34383530362D3231373630313539363133363131362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530672.871:9725): pid=50406 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530672.872:9726): pid=50406 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530673.038:9727): pid=50406 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530673.038:9728): pid=50406 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530673.040:9729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530673.040:9730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530673.051:9731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530673.051:9732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530673.052:9733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530673.075:9734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530673.075:9735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530673.280:9736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530673.280:9737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530673.281:9738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50490 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530673.301:9739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530673.301:9740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530673.310:9741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530673.310:9742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530673.311:9743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50509 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530673.364:9744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530673.364:9745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530673.375:9746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530673.375:9747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530673.379:9748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50535 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530673.416:9749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530673.416:9750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530673.429:9751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530673.429:9752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530673.430:9753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530673.464:9754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530673.464:9755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530673.477:9756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530673.477:9757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530673.480:9758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50570 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530673.556:9759): pid=50585 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530673.556:9760): pid=50585 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6266636961676F736F6D6372756D75756A696B6A7271726A677978656F6A7A69203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637332E3330323638372D34383530362D38393339333033353235303534342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530673.556:9761): pid=50585 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530673.560:9762): pid=50585 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530673.740:9763): pid=50585 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530673.740:9764): pid=50585 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530673.746:9765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530673.746:9766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530673.756:9767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530673.756:9768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530673.757:9769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50589 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530673.797:9770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530673.797:9771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.002:9772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.002:9773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.004:9774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530674.026:9775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.026:9776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.036:9777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.036:9778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.037:9779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50618 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530674.060:9780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.060:9781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.074:9782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.074:9783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.075:9784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530674.128:9785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.128:9786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.142:9787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.142:9788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.143:9789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50653 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530674.172:9790): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.172:9791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.183:9792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.183:9793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.185:9794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50670 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530674.245:9795): pid=50685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530674.245:9796): pid=50685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76776A747364766572727266767A747867717775787A6F796E6770696D726975203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637342E3032383038332D34383530362D3234333532383536313631313136302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530674.246:9797): pid=50685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530674.249:9798): pid=50685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530674.428:9799): pid=50685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530674.428:9800): pid=50685 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530674.430:9801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.430:9802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.445:9803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.445:9804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.446:9805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530674.485:9806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.485:9807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.717:9808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.717:9809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.719:9810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50712 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530674.753:9811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.753:9812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.767:9813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.767:9814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.768:9815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50728 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530674.793:9816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.793:9817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.808:9818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.808:9819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.809:9820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50749 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530674.841:9821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.841:9822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.853:9823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.853:9824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.854:9825): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50765 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530674.873:9826): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530674.873:9827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530674.884:9828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530674.884:9829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530674.885:9830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50784 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530674.935:9831): pid=50799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530674.935:9832): pid=50799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667761666D7661796F68697A64747266686671657173626D6D61667267666274203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637342E373535313531332D34383530362D37353936333436323933353238372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530674.936:9833): pid=50799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530674.945:9834): pid=50799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530675.108:9835): pid=50799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530675.109:9836): pid=50799 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530675.111:9837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530675.111:9838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530675.122:9839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530675.122:9840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530675.123:9841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530675.143:9842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530675.143:9843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530675.350:9844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530675.350:9845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530675.351:9846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50826 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530675.370:9847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530675.370:9848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530675.378:9849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530675.378:9850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530675.379:9851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50840 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530675.412:9852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530675.412:9853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530675.430:9854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530675.430:9855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530675.433:9856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50861 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530675.491:9857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530675.491:9858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530675.501:9859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530675.501:9860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530675.506:9861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50875 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530675.532:9862): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530675.533:9863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530675.543:9864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530675.543:9865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530675.544:9866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50890 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530675.592:9867): pid=50905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530675.592:9868): pid=50905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7870716B677A7862736A6479676D6C616B717576616B6A65796B6A7465707476203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637352E333731333535332D34383530362D31323932353034323533363539312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530675.593:9869): pid=50905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530675.594:9870): pid=50905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530675.744:9871): pid=50905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530675.744:9872): pid=50905 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530675.748:9873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530675.748:9874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530675.757:9875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530675.758:9876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530675.759:9877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50915 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530675.778:9878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530675.778:9879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530675.980:9880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530675.981:9881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530675.982:9882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50932 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.001:9883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.001:9884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.013:9885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.014:9886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.015:9887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50950 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.040:9888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.040:9889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.056:9890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.056:9891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.057:9892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50971 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.088:9893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.088:9894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.100:9895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.100:9896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.108:9897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=50985 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.126:9898): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.126:9899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.137:9900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.137:9901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.138:9902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51000 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530676.187:9903): pid=51015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530676.187:9904): pid=51015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A6562796161756478726B6C6177656C726867757172686A79686F6E627979203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637362E303033323136372D34383530362D3235353730323638353132373739332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530676.188:9905): pid=51015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530676.189:9906): pid=51015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530676.352:9907): pid=51015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530676.352:9908): pid=51015 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530676.355:9909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.355:9910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.366:9911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.366:9912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.367:9913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51019 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.384:9914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.384:9915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.581:9916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.581:9917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.582:9918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51040 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.602:9919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.602:9920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.612:9921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.612:9922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.613:9923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51054 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.635:9924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.635:9925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.650:9926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.650:9927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.651:9928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51075 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.681:9929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.681:9930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.692:9931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.692:9932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.693:9933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51089 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.711:9934): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.711:9935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.722:9936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.722:9937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.723:9938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51104 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530676.773:9939): pid=51119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530676.773:9940): pid=51119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C6577646E6C6562676F71756D7662707965797978616B70686E746F666671203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637362E363034333935392D34383530362D37373431373935343030313534342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530676.774:9941): pid=51119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530676.775:9942): pid=51119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530676.928:9943): pid=51119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530676.928:9944): pid=51119 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530676.930:9945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.931:9946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530676.942:9947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530676.942:9948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530676.943:9949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530676.974:9950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530676.974:9951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.159:9952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.159:9953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.160:9954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51150 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530677.177:9955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.177:9956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.186:9957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.186:9958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.187:9959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51164 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530677.212:9960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.212:9961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.228:9962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.228:9963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.229:9964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51185 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530677.264:9965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.264:9966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.275:9967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.275:9968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.276:9969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51199 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530677.296:9970): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.296:9971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.307:9972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.307:9973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.308:9974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51214 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530677.362:9975): pid=51229 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530677.362:9976): pid=51229 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B757174676F6B73676E70776761626F65616C646161727778796B61697164203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637372E3137383435362D34383530362D3139393830323137383434343831302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530677.363:9977): pid=51229 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530677.365:9978): pid=51229 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530677.535:9979): pid=51229 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530677.535:9980): pid=51229 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530677.538:9981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.539:9982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.550:9983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.550:9984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.551:9985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51233 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530677.574:9986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.574:9987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.772:9988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.772:9989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.773:9990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530677.794:9991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.795:9992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.804:9993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.805:9994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.806:9995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51268 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530677.829:9996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.829:9997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.846:9998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.846:9999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.848:10000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51289 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530677.883:10001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.883:10002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.894:10003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.894:10004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.895:10005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530677.914:10006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530677.914:10007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530677.926:10008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530677.926:10009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530677.927:10010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51318 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530677.982:10011): pid=51333 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530677.982:10012): pid=51333 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62697779796471796761697071706A6379686974786A6C6A6E6B737277656777203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637372E373936363131382D34383530362D3232313936333235343735323839382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530677.983:10013): pid=51333 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530677.984:10014): pid=51333 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530678.155:10015): pid=51333 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530678.155:10016): pid=51333 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530678.158:10017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530678.158:10018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530678.170:10019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530678.170:10020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530678.171:10021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51343 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530678.191:10022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530678.191:10023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530678.415:10024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530678.415:10025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530678.416:10026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51360 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530678.436:10027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530678.436:10028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530678.445:10029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530678.445:10030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530678.447:10031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51378 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530678.467:10032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530678.467:10033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530678.480:10034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530678.480:10035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530678.481:10036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51399 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530678.509:10037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530678.509:10038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530678.519:10039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530678.519:10040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530678.520:10041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51413 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530678.538:10042): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530678.538:10043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530678.549:10044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530678.549:10045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530678.550:10046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51428 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530678.599:10047): pid=51443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530678.600:10048): pid=51443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786C667073617969786A767963706E6367716F7A72716F716F766A75687A726B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637382E343337333532342D34383530362D35393832383631323439393432382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530678.600:10049): pid=51443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530678.601:10050): pid=51443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530678.770:10051): pid=51443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530678.770:10052): pid=51443 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530678.773:10053): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530678.774:10054): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530678.785:10055): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530678.785:10056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530678.786:10057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51447 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530678.805:10058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530678.806:10059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530678.984:10060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530678.984:10061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530678.985:10062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51462 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530679.003:10063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.004:10064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.013:10065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.013:10066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.014:10067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51476 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530679.040:10068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.040:10069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.055:10070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.055:10071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.056:10072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530679.087:10073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.087:10074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.096:10075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.096:10076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.097:10077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51523 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530679.117:10078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.117:10079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.128:10080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.129:10081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.130:10082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51538 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530679.184:10083): pid=51553 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530679.184:10084): pid=51553 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75716B7677766869777269697A6362666D6D676C77797177656979696F707777203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637392E303035313130372D34383530362D3130323535313334393134373738312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530679.184:10085): pid=51553 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530679.186:10086): pid=51553 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530679.361:10087): pid=51553 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530679.362:10088): pid=51553 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530679.364:10089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.364:10090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.376:10091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.376:10092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.377:10093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51557 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530679.397:10094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.397:10095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.598:10096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.598:10097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.599:10098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51572 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530679.618:10099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.618:10100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.627:10101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.627:10102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.629:10103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530679.649:10104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.650:10105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.663:10106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.663:10107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.664:10108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51607 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530679.698:10109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.698:10110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.709:10111): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.709:10112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.710:10113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530679.731:10114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.732:10115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.742:10116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.742:10117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.743:10118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51638 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530679.794:10119): pid=51653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530679.794:10120): pid=51653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7462706161736D6C69696A647373627A6673696477667878616161646F6A6F6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303637392E363139393636332D34383530362D3130343439383034383336393438302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530679.794:10121): pid=51653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530679.796:10122): pid=51653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530679.965:10123): pid=51653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530679.965:10124): pid=51653 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530679.968:10125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530679.968:10126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530679.980:10127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530679.980:10128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530679.981:10129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.001:10130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.001:10131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.202:10132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.202:10133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.205:10134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51682 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.223:10135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.224:10136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.232:10137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.232:10138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.235:10139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51697 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.256:10140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.256:10141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.271:10142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.271:10143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.272:10144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.306:10145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.306:10146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.318:10147): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.318:10148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.319:10149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51733 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.339:10150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.339:10151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.350:10152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.350:10153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.353:10154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51752 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530680.429:10155): pid=51774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530680.429:10156): pid=51774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F65636B756672776F6178726573717777656D6266786B6F766964736B68706B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303638302E3232353136332D34383530362D32363437353737313531343433342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530680.430:10157): pid=51774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530680.432:10158): pid=51774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530680.605:10159): pid=51774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530680.605:10160): pid=51774 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530680.607:10161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.608:10162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.619:10163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.619:10164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.620:10165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51804 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.638:10166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.638:10167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.850:10168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.851:10169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.852:10170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51819 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.869:10171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.870:10172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.879:10173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.879:10174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.881:10175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51833 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.906:10176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.906:10177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.921:10178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.921:10179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.924:10180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51854 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.953:10181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.953:10182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.964:10183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.964:10184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.968:10185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530680.987:10186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530680.987:10187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530680.998:10188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530680.998:10189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530680.999:10190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530681.051:10191): pid=51898 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530681.051:10192): pid=51898 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B63747766656C636B7065636663736F7279756F78767178646C697A7A676F64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303638302E38373130332D34383530362D38353234313838343531353938382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530681.051:10193): pid=51898 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530681.053:10194): pid=51898 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530681.215:10195): pid=51898 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530681.216:10196): pid=51898 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530681.218:10197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530681.220:10198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530681.231:10199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530681.231:10200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530681.232:10201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51902 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530681.250:10202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530681.250:10203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530681.769:10204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530681.769:10205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530681.770:10206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51942 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530681.788:10207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530681.788:10208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530681.797:10209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530681.797:10210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530681.800:10211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530681.832:10212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530681.832:10213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530681.983:10214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530681.983:10215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530681.986:10216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51977 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530682.022:10217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.022:10218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.032:10219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.032:10220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.033:10221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=51993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530682.055:10222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.055:10223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.064:10224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.065:10225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.066:10226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52012 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530682.117:10227): pid=52027 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530682.117:10228): pid=52027 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F637A62736B65757576656978746F757A7275716F7272787179616567796767203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303638312E373839373130382D35313934302D33343333393837333531313733372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530682.118:10229): pid=52027 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530682.119:10230): pid=52027 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530682.266:10231): pid=52027 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530682.266:10232): pid=52027 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530682.271:10233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.271:10234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.285:10235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.286:10236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.287:10237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52032 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530682.308:10238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.308:10239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.319:10240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.319:10241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.320:10242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530682.339:10243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.339:10244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.354:10245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.354:10246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.355:10247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52068 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530682.385:10248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.385:10249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.395:10250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.395:10251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.396:10252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530682.415:10253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.416:10254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.426:10255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.426:10256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.427:10257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530682.478:10258): pid=52112 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530682.479:10259): pid=52112 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F777565636D73656571776E6A687365786264646962627577636C646C776774203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303638312E373839373130382D35313934302D33343333393837333531313733372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530682.479:10260): pid=52112 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530682.481:10261): pid=52112 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530682.660:10262): pid=52112 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530682.660:10263): pid=52112 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530682.662:10264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.664:10265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.673:10266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.673:10267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.676:10268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52116 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530682.696:10269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.696:10270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.936:10271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.936:10272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.937:10273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530682.955:10274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.955:10275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530682.964:10276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530682.964:10277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530682.967:10278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52153 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530682.988:10279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530682.989:10280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530683.004:10281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530683.004:10282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530683.005:10283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52174 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530683.042:10284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530683.042:10285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530683.053:10286): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530683.053:10287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530683.053:10288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530683.071:10289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530683.071:10290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530683.081:10291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530683.081:10292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530683.082:10293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=52203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530683.134:10294): pid=52218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530683.135:10295): pid=52218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530683.135:10296): pid=52218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530683.137:10297): pid=52218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530684.038:10298): prog-id=358 op=LOAD
type=SYSCALL msg=audit(1748530684.038:10298): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012dc48 a2=90 a3=0 items=0 ppid=52265 pid=52275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.038:10298): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373263346165333837363638616265373135336435306533
type=BPF msg=audit(1748530684.039:10299): prog-id=359 op=LOAD
type=SYSCALL msg=audit(1748530684.039:10299): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012d9d8 a2=90 a3=0 items=0 ppid=52265 pid=52275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.039:10299): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373263346165333837363638616265373135336435306533
type=BPF msg=audit(1748530684.039:10300): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.039:10301): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.039:10302): prog-id=360 op=LOAD
type=SYSCALL msg=audit(1748530684.039:10302): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012deb0 a2=90 a3=0 items=0 ppid=52265 pid=52275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.039:10302): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373263346165333837363638616265373135336435306533
type=BPF msg=audit(1748530684.297:10303): prog-id=361 op=LOAD
type=BPF msg=audit(1748530684.298:10304): prog-id=362 op=LOAD
type=SYSCALL msg=audit(1748530684.298:10304): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dad0 a2=90 a3=0 items=0 ppid=52419 pid=52434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.298:10304): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666531623664636533373831636434306266666137376137
type=BPF msg=audit(1748530684.298:10305): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.298:10306): prog-id=363 op=LOAD
type=SYSCALL msg=audit(1748530684.298:10306): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dc48 a2=90 a3=0 items=0 ppid=52419 pid=52434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.298:10306): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666531623664636533373831636434306266666137376137
type=BPF msg=audit(1748530684.298:10307): prog-id=364 op=LOAD
type=SYSCALL msg=audit(1748530684.298:10307): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011d9d8 a2=90 a3=0 items=0 ppid=52419 pid=52434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.298:10307): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666531623664636533373831636434306266666137376137
type=BPF msg=audit(1748530684.298:10308): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.298:10309): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.298:10310): prog-id=365 op=LOAD
type=SYSCALL msg=audit(1748530684.298:10310): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011deb0 a2=90 a3=0 items=0 ppid=52419 pid=52434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.298:10310): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666531623664636533373831636434306266666137376137
type=BPF msg=audit(1748530684.441:10311): prog-id=366 op=LOAD
type=BPF msg=audit(1748530684.445:10312): prog-id=367 op=LOAD
type=SYSCALL msg=audit(1748530684.445:10312): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00023bad0 a2=90 a3=0 items=0 ppid=52500 pid=52531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.445:10312): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633763346332656534336561663066386637646264383332
type=BPF msg=audit(1748530684.450:10313): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.450:10314): prog-id=368 op=LOAD
type=SYSCALL msg=audit(1748530684.450:10314): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00023bc48 a2=90 a3=0 items=0 ppid=52500 pid=52531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.450:10314): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633763346332656534336561663066386637646264383332
type=BPF msg=audit(1748530684.450:10315): prog-id=369 op=LOAD
type=SYSCALL msg=audit(1748530684.450:10315): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00023b9d8 a2=90 a3=0 items=0 ppid=52500 pid=52531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.450:10315): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633763346332656534336561663066386637646264383332
type=BPF msg=audit(1748530684.450:10316): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.451:10317): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.451:10318): prog-id=370 op=LOAD
type=SYSCALL msg=audit(1748530684.451:10318): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00023beb0 a2=90 a3=0 items=0 ppid=52500 pid=52531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.451:10318): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633763346332656534336561663066386637646264383332
type=BPF msg=audit(1748530684.605:10319): prog-id=371 op=LOAD
type=BPF msg=audit(1748530684.606:10320): prog-id=372 op=LOAD
type=SYSCALL msg=audit(1748530684.606:10320): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bad0 a2=90 a3=0 items=0 ppid=52554 pid=52665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.606:10320): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33373862343837636134343539653638633135343030353164
type=BPF msg=audit(1748530684.606:10321): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.606:10322): prog-id=373 op=LOAD
type=SYSCALL msg=audit(1748530684.606:10322): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bc48 a2=90 a3=0 items=0 ppid=52554 pid=52665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.606:10322): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33373862343837636134343539653638633135343030353164
type=BPF msg=audit(1748530684.607:10323): prog-id=374 op=LOAD
type=SYSCALL msg=audit(1748530684.607:10323): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011b9d8 a2=90 a3=0 items=0 ppid=52554 pid=52665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.607:10323): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33373862343837636134343539653638633135343030353164
type=BPF msg=audit(1748530684.607:10324): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.607:10325): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.607:10326): prog-id=375 op=LOAD
type=SYSCALL msg=audit(1748530684.607:10326): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011beb0 a2=90 a3=0 items=0 ppid=52554 pid=52665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.607:10326): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33373862343837636134343539653638633135343030353164
type=BPF msg=audit(1748530684.609:10327): prog-id=376 op=LOAD
type=BPF msg=audit(1748530684.610:10328): prog-id=377 op=LOAD
type=SYSCALL msg=audit(1748530684.610:10328): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00023bad0 a2=90 a3=0 items=0 ppid=52577 pid=52699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.610:10328): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313830373838393932363631396435343938373933623062
type=BPF msg=audit(1748530684.610:10329): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.610:10330): prog-id=378 op=LOAD
type=SYSCALL msg=audit(1748530684.610:10330): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00023bc48 a2=90 a3=0 items=0 ppid=52577 pid=52699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.610:10330): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313830373838393932363631396435343938373933623062
type=BPF msg=audit(1748530684.610:10331): prog-id=379 op=LOAD
type=SYSCALL msg=audit(1748530684.610:10331): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00023b9d8 a2=90 a3=0 items=0 ppid=52577 pid=52699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.610:10331): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313830373838393932363631396435343938373933623062
type=BPF msg=audit(1748530684.610:10332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.610:10333): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.610:10334): prog-id=380 op=LOAD
type=SYSCALL msg=audit(1748530684.610:10334): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00023beb0 a2=90 a3=0 items=0 ppid=52577 pid=52699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.610:10334): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313830373838393932363631396435343938373933623062
type=BPF msg=audit(1748530684.764:10335): prog-id=381 op=LOAD
type=SYSCALL msg=audit(1748530684.764:10335): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a3c48 a2=90 a3=0 items=0 ppid=52742 pid=52785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.764:10335): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663532343533613532366166643134393238313730353034
type=BPF msg=audit(1748530684.765:10336): prog-id=382 op=LOAD
type=SYSCALL msg=audit(1748530684.765:10336): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001a39d8 a2=90 a3=0 items=0 ppid=52742 pid=52785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.765:10336): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663532343533613532366166643134393238313730353034
type=BPF msg=audit(1748530684.765:10337): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.765:10338): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530684.765:10339): prog-id=383 op=LOAD
type=SYSCALL msg=audit(1748530684.765:10339): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a3eb0 a2=90 a3=0 items=0 ppid=52742 pid=52785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530684.765:10339): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663532343533613532366166643134393238313730353034
type=BPF msg=audit(1748530684.905:10340): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748530684.905:10341): pid=52218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530684.905:10342): pid=52218 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530684.908:10343): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530684.908:10344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530684.919:10345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530684.919:10346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530684.920:10347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53213 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530684.946:10348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530684.946:10349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530685.578:10350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530685.578:10351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530685.579:10352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53423 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530685.604:10353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530685.604:10354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530685.614:10355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530685.614:10356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530685.615:10357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53437 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530685.646:10358): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530685.647:10359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530685.662:10360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530685.662:10361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530685.663:10362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53458 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530685.694:10363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530685.695:10364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530685.709:10365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530685.709:10366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530685.710:10367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530685.730:10368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530685.730:10369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530685.741:10370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530685.742:10371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530685.743:10372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53487 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530685.794:10373): pid=53502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530685.794:10374): pid=53502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7161747A746168796A796F626A6F6B646372706A7578747A67776570706862203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303638352E363036353733382D35333430302D3231363130343634393739323432352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530685.795:10375): pid=53502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530685.798:10376): pid=53502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530686.097:10377): pid=53502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530686.097:10378): pid=53502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530686.100:10379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530686.100:10380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530686.109:10381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530686.110:10382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530686.111:10383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53523 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530686.143:10384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530686.143:10385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530686.411:10386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530686.412:10387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530686.414:10388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53539 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530686.438:10389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530686.439:10390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530686.451:10391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530686.451:10392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530686.452:10393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53553 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530686.494:10394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530686.494:10395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530686.507:10396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530686.507:10397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530686.508:10398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53574 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530686.552:10399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530686.552:10400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530686.565:10401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530686.565:10402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530686.566:10403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53588 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530686.596:10404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530686.596:10405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530686.605:10406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530686.605:10407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530686.608:10408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53603 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530686.676:10409): pid=53618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530686.676:10410): pid=53618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646D706B786F7965756B78697875696662796F67776E6F6670776561666F636F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303638362E34343037382D35333430302D31393136323134333137323637342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530686.677:10411): pid=53618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530686.683:10412): pid=53618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530686.990:10413): pid=53618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530686.990:10414): pid=53618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530686.997:10415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530686.997:10416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530687.007:10417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530687.008:10418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530687.009:10419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53634 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530687.036:10420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530687.036:10421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530687.303:10422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530687.303:10423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530687.305:10424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53656 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530687.321:10425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530687.321:10426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530687.335:10427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530687.335:10428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530687.336:10429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53670 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530687.379:10430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530687.379:10431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530687.392:10432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530687.392:10433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530687.395:10434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530687.442:10435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530687.442:10436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530687.453:10437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530687.453:10438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530687.454:10439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53711 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530687.483:10440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530687.483:10441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530687.499:10442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530687.499:10443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530687.500:10444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53726 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530687.563:10445): pid=53745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530687.563:10446): pid=53745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67686A63747A636462656F757368646E72757461697179636B7276617A667971203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303638372E333236373836332D35333430302D3133363337343331303133343835392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530687.563:10447): pid=53745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530687.565:10448): pid=53745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530698.606:10449): pid=53745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530698.606:10450): pid=53745 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530698.609:10451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530698.610:10452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530698.621:10453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530698.621:10454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530698.623:10455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530698.645:10456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530698.645:10457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530698.892:10458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530698.892:10459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530698.893:10460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530698.912:10461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530698.912:10462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530698.922:10463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530698.922:10464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530698.923:10465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53970 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530698.958:10466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530698.958:10467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530698.972:10468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530698.972:10469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530698.973:10470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=53991 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530699.006:10471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530699.007:10472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530699.017:10473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530699.017:10474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530699.018:10475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54007 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530699.037:10476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530699.037:10477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530699.047:10478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530699.047:10479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530699.048:10480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54022 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530699.114:10481): pid=54041 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530699.114:10482): pid=54041 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F7A696D6F6872616376776B7161666374636C64766B7062657A777579796E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303639382E393133393134372D35333430302D3139363930343037323337383437322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530699.115:10483): pid=54041 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530699.116:10484): pid=54041 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530699.401:10485): pid=54041 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530699.401:10486): pid=54041 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530699.404:10487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530699.404:10488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530699.416:10489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530699.416:10490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530699.419:10491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54055 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530699.455:10492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530699.455:10493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530699.710:10494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530699.710:10495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530699.711:10496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54074 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530699.735:10497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530699.735:10498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530699.745:10499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530699.745:10500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530699.746:10501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54088 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530699.786:10502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530699.786:10503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530699.801:10504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530699.801:10505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530699.805:10506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530699.857:10507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530699.857:10508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530699.868:10509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530699.868:10510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530699.870:10511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54125 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530699.902:10512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530699.902:10513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530699.913:10514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530699.913:10515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530699.914:10516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530699.969:10517): pid=54159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530699.969:10518): pid=54159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C766C646F6C6F71796C6C6961636B766277646375696F6D6176756E6A627874203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303639392E373336323336382D35333430302D3233353736343838383039373738362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530699.969:10519): pid=54159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530699.971:10520): pid=54159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530700.253:10521): pid=54159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530700.253:10522): pid=54159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530700.255:10523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530700.255:10524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530700.267:10525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530700.267:10526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530700.268:10527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54171 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530700.286:10528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530700.286:10529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530700.503:10530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530700.503:10531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530700.505:10532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54187 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530700.523:10533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530700.523:10534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530700.534:10535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530700.534:10536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530700.535:10537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530700.556:10538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530700.556:10539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530700.573:10540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530700.573:10541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530700.574:10542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54222 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530700.617:10543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530700.617:10544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530700.627:10545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530700.627:10546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530700.629:10547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54238 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530700.653:10548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530700.653:10549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530700.665:10550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530700.665:10551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530700.666:10552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530700.730:10553): pid=54274 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530700.730:10554): pid=54274 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F647A7A646D6467626D757A76756C7368656A676663626F686A6461626B68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730302E353235363137312D35343138352D3230373330383330323431393332332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530700.730:10555): pid=54274 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530700.732:10556): pid=54274 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530700.901:10557): pid=54274 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530700.902:10558): pid=54274 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530700.906:10559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530700.906:10560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530700.916:10561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530700.916:10562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530700.917:10563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54282 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530700.936:10564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530700.936:10565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530701.478:10566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530701.478:10567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530701.479:10568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54309 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530701.496:10569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530701.496:10570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530701.505:10571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530701.505:10572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530701.506:10573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54323 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530701.536:10574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530701.536:10575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530701.550:10576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530701.550:10577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530701.551:10578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54344 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530701.580:10579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530701.580:10580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530701.590:10581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530701.590:10582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530701.594:10583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54358 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530701.610:10584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530701.610:10585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530701.620:10586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530701.620:10587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530701.621:10588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54373 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530701.672:10589): pid=54388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530701.672:10590): pid=54388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7461627973747674796F77647079627479616770696F64657A75647573666369203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730312E343937393338322D35343330312D3236363733323530373630323730312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530701.672:10591): pid=54388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530701.674:10592): pid=54388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530701.829:10593): pid=54388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530701.829:10594): pid=54388 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530701.832:10595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530701.832:10596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530701.842:10597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530701.842:10598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530701.842:10599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530701.861:10600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530701.861:10601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530702.114:10602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530702.114:10603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530702.115:10604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54417 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530702.138:10605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530702.138:10606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530702.147:10607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530702.148:10608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530702.151:10609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530702.196:10610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530702.196:10611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530702.211:10612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530702.211:10613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530702.213:10614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54454 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530702.249:10615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530702.249:10616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530702.258:10617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530702.258:10618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530702.259:10619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530702.279:10620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530702.280:10621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530702.290:10622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530702.290:10623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530702.291:10624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54487 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530702.346:10625): pid=54502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530702.346:10626): pid=54502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64666C666B766C6B67667867656672667074736D7473736B6D6675676762696C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730322E313430303837362D35343431352D3132323134353631313339353031342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530702.346:10627): pid=54502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530702.348:10628): pid=54502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530702.529:10629): pid=54502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530702.529:10630): pid=54502 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530702.532:10631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530702.532:10632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530702.544:10633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530702.544:10634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530702.545:10635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54506 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530702.565:10636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530702.565:10637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530702.923:10638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530702.923:10639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530702.929:10640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54525 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530702.945:10641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530702.945:10642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530702.954:10643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530702.954:10644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530702.955:10645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54545 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530702.980:10646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530702.980:10647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530702.996:10648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530702.996:10649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530702.997:10650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54570 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530703.029:10651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.030:10652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530703.040:10653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530703.040:10654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530703.041:10655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54584 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530703.066:10656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.066:10657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530703.078:10658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530703.078:10659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530703.079:10660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54599 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530703.132:10661): pid=54614 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530703.132:10662): pid=54614 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637370776B756D697276747077676F757261677264796862627467697870626B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730322E393437353632322D35343532312D3237383630393630303536383038372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530703.133:10663): pid=54614 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530703.134:10664): pid=54614 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530703.302:10665): pid=54614 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530703.303:10666): pid=54614 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530703.305:10667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.306:10668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530703.317:10669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530703.317:10670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530703.318:10671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54618 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530703.341:10672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.341:10673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530703.532:10674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530703.533:10675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530703.534:10676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54634 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530703.553:10677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.553:10678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530703.563:10679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530703.563:10680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530703.563:10681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54648 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530703.585:10682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.586:10683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530703.601:10684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530703.601:10685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530703.602:10686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54669 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530703.631:10687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.632:10688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530703.643:10689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530703.643:10690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530703.644:10691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54683 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530703.666:10692): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.666:10693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530703.677:10694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530703.677:10695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530703.680:10696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54700 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530703.736:10697): pid=54719 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530703.736:10698): pid=54719 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71617A7A78746C69617266656E6D71756B74626C666477666D7A6F61676B786C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730332E3535343639312D35343532312D3236303339383738373232383335322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530703.736:10699): pid=54719 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530703.738:10700): pid=54719 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530703.894:10701): pid=54719 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530703.894:10702): pid=54719 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530703.897:10703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.898:10704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530703.908:10705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530703.908:10706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530703.909:10707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54723 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530703.929:10708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530703.929:10709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.135:10710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.135:10711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.136:10712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54744 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530704.155:10713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.155:10714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.164:10715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.164:10716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.165:10717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54758 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530704.188:10718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.188:10719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.202:10720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.202:10721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.203:10722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54779 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530704.233:10723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.234:10724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.244:10725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.244:10726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.245:10727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54793 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530704.263:10728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.263:10729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.273:10730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.273:10731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.274:10732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54808 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530704.334:10733): pid=54823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530704.335:10734): pid=54823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B626874767A627A766B7873716D646563776C6B6669787165657578636373203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730342E313536383236372D35343532312D3231353831303536323935343534342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530704.335:10735): pid=54823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530704.337:10736): pid=54823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530704.507:10737): pid=54823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530704.507:10738): pid=54823 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530704.510:10739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.511:10740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.522:10741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.522:10742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.523:10743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54833 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530704.544:10744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.544:10745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.734:10746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.735:10747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.736:10748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54848 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530704.761:10749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.761:10750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.773:10751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.773:10752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.775:10753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54862 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530704.797:10754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.797:10755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.813:10756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.813:10757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.815:10758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530704.856:10759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.856:10760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.869:10761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.869:10762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.871:10763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54897 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530704.893:10764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530704.894:10765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530704.906:10766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530704.906:10767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530704.907:10768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54912 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530704.968:10769): pid=54927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530704.968:10770): pid=54927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7071696B6264666B6C6C746A6667776B64786975646279676E7770656C71726D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730342E373633373631352D35343532312D3136353431343336303937343037392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530704.969:10771): pid=54927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530704.970:10772): pid=54927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530705.149:10773): pid=54927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530705.150:10774): pid=54927 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530705.153:10775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530705.154:10776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530705.164:10777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530705.164:10778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530705.165:10779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54939 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530705.196:10780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530705.196:10781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530705.400:10782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530705.401:10783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530705.401:10784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54960 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530705.419:10785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530705.420:10786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530705.430:10787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530705.430:10788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530705.432:10789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54974 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530705.464:10790): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530705.464:10791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530705.477:10792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530705.477:10793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530705.479:10794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=54995 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530705.507:10795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530705.507:10796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530705.517:10797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530705.517:10798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530705.518:10799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530705.536:10800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530705.536:10801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530705.547:10802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530705.547:10803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530705.548:10804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55024 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530705.598:10805): pid=55039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530705.599:10806): pid=55039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67697667776361786964767270776D7678726C77767376706678796A65626170203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730352E3432323032372D35343532312D3230313935363933363733333331352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530705.599:10807): pid=55039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530705.600:10808): pid=55039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530705.767:10809): pid=55039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530705.768:10810): pid=55039 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530705.771:10811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530705.772:10812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530705.791:10813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530705.791:10814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530705.793:10815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55043 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530705.816:10816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530705.816:10817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.005:10818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.005:10819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.007:10820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55064 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530706.025:10821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.025:10822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.037:10823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.040:10824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.041:10825): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55078 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530706.087:10826): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.088:10827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.106:10828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.106:10829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.107:10830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55099 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530706.139:10831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.139:10832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.150:10833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.150:10834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.152:10835): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530706.176:10836): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.176:10837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.184:10838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.184:10839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.185:10840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55128 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530706.240:10841): pid=55143 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530706.240:10842): pid=55143 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C66777465786E696E6E767863736D666C75626370756B747A71746A636F72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730362E3032363733342D35343532312D353736393831303530323132392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530706.241:10843): pid=55143 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530706.242:10844): pid=55143 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530706.418:10845): pid=55143 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530706.418:10846): pid=55143 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530706.421:10847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.422:10848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.431:10849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.431:10850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.432:10851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55147 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530706.456:10852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.456:10853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.670:10854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.670:10855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.671:10856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55174 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530706.691:10857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.692:10858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.700:10859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.700:10860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.702:10861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530706.722:10862): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.722:10863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.737:10864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.737:10865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.738:10866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55209 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530706.767:10867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.767:10868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.778:10869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.778:10870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.779:10871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530706.798:10872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530706.798:10873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530706.808:10874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530706.808:10875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530706.809:10876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55238 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530706.859:10877): pid=55253 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530706.860:10878): pid=55253 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726C7161727A776B65637569646E6468617263616D646A7A6A697264686C6F63203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730362E363933303233322D35343532312D3237393938373836343439373134372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530706.860:10879): pid=55253 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530706.862:10880): pid=55253 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530707.021:10881): pid=55253 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530707.022:10882): pid=55253 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530707.025:10883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.026:10884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.036:10885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.036:10886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.037:10887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.057:10888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.057:10889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.248:10890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.248:10891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.249:10892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.268:10893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.268:10894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.277:10895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.277:10896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.278:10897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.311:10898): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.311:10899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.327:10900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.327:10901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.330:10902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.364:10903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.364:10904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.375:10905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.375:10906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.377:10907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55321 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.397:10908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.397:10909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.406:10910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.406:10911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.407:10912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55338 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530707.462:10913): pid=55353 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530707.462:10914): pid=55353 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74727367716E67706677646F7A776F6D677870746F726277776164736D696F72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730372E323639343732362D35343532312D3231333636383431393631363630392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530707.462:10915): pid=55353 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530707.463:10916): pid=55353 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530707.640:10917): pid=55353 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530707.640:10918): pid=55353 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530707.642:10919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.642:10920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.653:10921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.653:10922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.654:10923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55367 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.673:10924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.673:10925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.862:10926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.862:10927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.863:10928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55382 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.882:10929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.883:10930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.892:10931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.892:10932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.893:10933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55396 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.918:10934): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.919:10935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.933:10936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.933:10937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.934:10938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55417 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.965:10939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.965:10940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530707.976:10941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530707.976:10942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530707.976:10943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530707.994:10944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530707.994:10945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530708.005:10946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530708.005:10947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530708.007:10948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55446 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530708.061:10949): pid=55461 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530708.062:10950): pid=55461 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6861676C6C6D716D6A70686D6C7379716B6366626A6A776B7570696164647A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730372E3838343631312D35343532312D3233383838393938383335363135362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530708.062:10951): pid=55461 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530708.064:10952): pid=55461 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530708.232:10953): pid=55461 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530708.232:10954): pid=55461 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530708.234:10955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530708.234:10956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530708.243:10957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530708.243:10958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530708.245:10959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55471 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530708.263:10960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530708.264:10961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530708.452:10962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530708.452:10963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530708.453:10964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55486 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530708.473:10965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530708.473:10966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530708.482:10967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530708.482:10968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530708.483:10969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530708.508:10970): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530708.508:10971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530708.521:10972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530708.521:10973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530708.522:10974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55521 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530708.554:10975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530708.554:10976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530708.566:10977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530708.566:10978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530708.567:10979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55535 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530708.585:10980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530708.585:10981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530708.595:10982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530708.595:10983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530708.596:10984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530708.647:10985): pid=55565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530708.647:10986): pid=55565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716C737A747A727A69797A68746869656C7176646E7970646F66676D69656C64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730382E343735323637342D35343532312D33333833393838383632313737322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530708.647:10987): pid=55565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530708.650:10988): pid=55565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530708.816:10989): pid=55565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530708.817:10990): pid=55565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530708.819:10991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530708.820:10992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530708.831:10993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530708.831:10994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530708.832:10995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530708.869:10996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530708.869:10997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.052:10998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.053:10999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.054:11000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530709.074:11001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.074:11002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.083:11003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.083:11004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.084:11005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55610 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530709.108:11006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.108:11007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.122:11008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.122:11009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.123:11010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55631 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530709.152:11011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.152:11012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.163:11013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.163:11014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.164:11015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55645 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530709.183:11016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.183:11017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.194:11018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.194:11019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.195:11020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530709.244:11021): pid=55675 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530709.245:11022): pid=55675 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F75646E62786D63716B6D61767266717A7163646F6767667878766870626E68203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730392E303735383534332D35343532312D3230353337313536353938343036342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530709.245:11023): pid=55675 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530709.247:11024): pid=55675 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530709.424:11025): pid=55675 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530709.424:11026): pid=55675 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530709.427:11027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.427:11028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.440:11029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.440:11030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.441:11031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55679 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530709.462:11032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.462:11033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.670:11034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.670:11035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.671:11036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55694 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530709.703:11037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.703:11038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.713:11039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.713:11040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.714:11041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55710 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530709.757:11042): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.757:11043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.775:11044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.775:11045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.777:11046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55735 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530709.824:11047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.824:11048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.834:11049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.834:11050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.835:11051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55749 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530709.854:11052): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530709.854:11053): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530709.864:11054): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530709.864:11055): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530709.865:11056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55764 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530709.924:11057): pid=55779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530709.924:11058): pid=55779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A6869696E766F73756C687766716A6E747170796379786F6B6B756B636A61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303730392E373034373939372D35343532312D313637303739333935353138352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530709.925:11059): pid=55779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530709.926:11060): pid=55779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530710.087:11061): pid=55779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530710.087:11062): pid=55779 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530710.092:11063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530710.092:11064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530710.101:11065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530710.101:11066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530710.102:11067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530710.123:11068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530710.123:11069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530710.328:11070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530710.328:11071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530710.329:11072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55806 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530710.367:11073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530710.367:11074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530710.376:11075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530710.376:11076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530710.377:11077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530710.408:11078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530710.408:11079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530710.423:11080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530710.423:11081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530710.424:11082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55843 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530710.460:11083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530710.460:11084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530710.472:11085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530710.472:11086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530710.473:11087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55861 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530710.496:11088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530710.496:11089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530710.507:11090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530710.507:11091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530710.508:11092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55876 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530710.562:11093): pid=55891 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530710.562:11094): pid=55891 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7571726667637570746668716973646F65766E6C6A7A766A6E6E696463796763203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731302E333639303131362D35343532312D3236313332393137333339303238322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530710.563:11095): pid=55891 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530710.564:11096): pid=55891 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530710.745:11097): pid=55891 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530710.745:11098): pid=55891 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530710.748:11099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530710.749:11100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530710.760:11101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530710.760:11102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530710.761:11103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55895 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530710.783:11104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530710.784:11105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.007:11106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.007:11107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.008:11108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55910 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.028:11109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.028:11110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.037:11111): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.037:11112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.038:11113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.065:11114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.065:11115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.082:11116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.082:11117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.086:11118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55947 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.114:11119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.114:11120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.125:11121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.125:11122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.126:11123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55967 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.146:11124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.146:11125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.156:11126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.156:11127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.157:11128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=55986 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530711.213:11129): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530711.214:11130): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63726775756B77786474637775736A75636B6F636A6F766E7567707A71766E72203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731312E303330313833332D35343532312D3133383639313235343334323230352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530711.214:11131): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530711.216:11132): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530711.382:11133): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530711.383:11134): pid=56001 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530711.385:11135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.386:11136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.396:11137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.397:11138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.398:11139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56005 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.416:11140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.417:11141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.601:11142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.601:11143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.602:11144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56020 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.620:11145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.620:11146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.629:11147): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.629:11148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.630:11149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.651:11150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.652:11151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.666:11152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.666:11153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.667:11154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56055 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.696:11155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.696:11156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.707:11157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.708:11158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.708:11159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56069 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.726:11160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.726:11161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.737:11162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.737:11163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.739:11164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56084 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530711.795:11165): pid=56099 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530711.795:11166): pid=56099 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6862686A6D687674797A76756370697075657864697277766574696F70726F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731312E363232323639392D35343532312D36353736393431323434313332352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530711.796:11167): pid=56099 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530711.800:11168): pid=56099 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530711.958:11169): pid=56099 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530711.958:11170): pid=56099 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530711.962:11171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.963:11172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530711.972:11173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530711.972:11174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530711.973:11175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530711.993:11176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530711.993:11177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.195:11178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.195:11179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.196:11180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56126 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530712.230:11181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.230:11182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.242:11183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.242:11184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.244:11185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530712.269:11186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.269:11187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.285:11188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.285:11189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.286:11190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530712.315:11191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.315:11192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.326:11193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.326:11194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.327:11195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530712.346:11196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.346:11197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.357:11198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.357:11199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.358:11200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530712.407:11201): pid=56209 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530712.407:11202): pid=56209 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67696F68696E6671787667766163747677777471717263726A66676672766F6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731322E323331383532382D35343532312D35383036363737353930333239322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530712.407:11203): pid=56209 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530712.410:11204): pid=56209 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530712.560:11205): pid=56209 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530712.560:11206): pid=56209 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530712.568:11207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.568:11208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.578:11209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.578:11210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.579:11211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56215 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530712.596:11212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.596:11213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.778:11214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.778:11215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.783:11216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530712.802:11217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.802:11218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.811:11219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.811:11220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.812:11221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56248 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530712.831:11222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.831:11223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.846:11224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.846:11225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.847:11226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56269 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530712.881:11227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.881:11228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.891:11229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.891:11230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.892:11231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530712.910:11232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530712.910:11233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530712.920:11234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530712.920:11235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530712.921:11236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56298 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530712.970:11237): pid=56313 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530712.971:11238): pid=56313 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706663706A73796B78656C6B796772776A7876736972717A6266696A7372766C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731322E383033362D35343532312D3135393932383838373432313637382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530712.971:11239): pid=56313 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530712.973:11240): pid=56313 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530713.160:11241): pid=56313 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530713.160:11242): pid=56313 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530713.164:11243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530713.164:11244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530713.175:11245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530713.175:11246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530713.177:11247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56317 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530713.198:11248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530713.198:11249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530713.403:11250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530713.403:11251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530713.404:11252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56344 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530713.423:11253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530713.423:11254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530713.432:11255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530713.432:11256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530713.433:11257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56358 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530713.455:11258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530713.455:11259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530713.471:11260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530713.471:11261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530713.472:11262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56379 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530713.503:11263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530713.503:11264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530713.519:11265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530713.519:11266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530713.520:11267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530713.545:11268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530713.546:11269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530713.556:11270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530713.556:11271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530713.557:11272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56408 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530713.605:11273): pid=56423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530713.606:11274): pid=56423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A706E6F7A726C61677971706B676D6366636179667675757468696C70687971203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731332E343234353936352D35343532312D3134343338343439363530353737322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530713.606:11275): pid=56423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530713.607:11276): pid=56423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530713.781:11277): pid=56423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530713.781:11278): pid=56423 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530713.783:11279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530713.784:11280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530713.795:11281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530713.795:11282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530713.805:11283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56427 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530713.827:11284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530713.827:11285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.063:11286): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.063:11287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.064:11288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530714.084:11289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.085:11290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.094:11291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.098:11292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.099:11293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56458 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530714.123:11294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.123:11295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.137:11296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.137:11297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.138:11298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56479 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530714.166:11299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.166:11300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.176:11301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.176:11302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.178:11303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56497 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530714.198:11304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.198:11305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.208:11306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.208:11307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.210:11308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56512 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530714.265:11309): pid=56527 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530714.265:11310): pid=56527 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737666666861786A6871676F7067637770626977676F726E737A79676A6D6E6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731342E303836333930352D35343532312D3130393337343231323035313735302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530714.265:11311): pid=56527 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530714.267:11312): pid=56527 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530714.433:11313): pid=56527 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530714.433:11314): pid=56527 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530714.435:11315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.436:11316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.446:11317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.446:11318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.447:11319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56532 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530714.465:11320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.466:11321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.641:11322): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.641:11323): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.642:11324): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56554 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530714.660:11325): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.660:11326): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.669:11327): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.669:11328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.672:11329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530714.691:11330): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.691:11331): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.705:11332): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.705:11333): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.706:11334): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56589 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530714.734:11335): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.734:11336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.745:11337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.745:11338): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.746:11339): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56603 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530714.764:11340): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530714.764:11341): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530714.773:11342): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530714.774:11343): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530714.775:11344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56618 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530714.830:11345): pid=56633 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530714.831:11346): pid=56633 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A627575777575647778617A6573716B73766368667961746F7165746F7569203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731342E3636313435342D35343532312D3232363739373535333632303831312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530714.831:11347): pid=56633 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530714.833:11348): pid=56633 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530714.997:11349): pid=56633 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530714.997:11350): pid=56633 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530715.001:11351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.001:11352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.012:11353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.012:11354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.013:11355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56643 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.032:11356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.032:11357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.246:11358): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.246:11359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.247:11360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.269:11361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.269:11362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.279:11363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.279:11364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.280:11365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.301:11366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.301:11367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.317:11368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.317:11369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.318:11370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56695 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.362:11371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.362:11372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.372:11373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.372:11374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.373:11375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.391:11376): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.392:11377): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.401:11378): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.402:11379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.403:11380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56724 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530715.455:11381): pid=56739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530715.456:11382): pid=56739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746F7777636D6F6373747362706E7962757A71747374706F796B626767737772203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731352E323731303535352D35343532312D3231383932313830323935323339312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530715.456:11383): pid=56739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530715.457:11384): pid=56739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530715.629:11385): pid=56739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530715.629:11386): pid=56739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530715.632:11387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.633:11388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.642:11389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.642:11390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.643:11391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56747 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.661:11392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.661:11393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.849:11394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.849:11395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.851:11396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56770 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.869:11397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.869:11398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.878:11399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.878:11400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.880:11401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56784 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.907:11402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.907:11403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.922:11404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.922:11405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.924:11406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56805 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.954:11407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.954:11408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.965:11409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.965:11410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.968:11411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56819 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530715.988:11412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530715.988:11413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530715.997:11414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530715.997:11415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530715.998:11416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530716.051:11417): pid=56849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530716.051:11418): pid=56849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65676778757A667361716577776F616D70616B6472716A6B6C6A6D6F6C6E6F74203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731352E383730383134332D35343532312D31393232353936363138383336322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530716.051:11419): pid=56849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530716.052:11420): pid=56849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530716.217:11421): pid=56849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530716.218:11422): pid=56849 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530716.220:11423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530716.220:11424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530716.232:11425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530716.232:11426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530716.233:11427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56853 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530716.252:11428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530716.252:11429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530716.462:11430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530716.462:11431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530716.463:11432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56874 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530716.485:11433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530716.485:11434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530716.495:11435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530716.495:11436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530716.496:11437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56888 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530716.518:11438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530716.518:11439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530716.534:11440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530716.534:11441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530716.535:11442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56909 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530716.564:11443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530716.565:11444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530716.575:11445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530716.575:11446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530716.579:11447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56923 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530716.595:11448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530716.596:11449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530716.608:11450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530716.608:11451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530716.609:11452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530716.658:11453): pid=56953 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530716.658:11454): pid=56953 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B796F736A77687475767A6D69616A757477666A75716E746F6B726170747769203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731362E343836333430332D35343532312D3131323734353738333831353533342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530716.658:11455): pid=56953 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530716.659:11456): pid=56953 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530716.811:11457): pid=56953 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530716.811:11458): pid=56953 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530716.814:11459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530716.814:11460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530716.825:11461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530716.825:11462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530716.826:11463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530716.854:11464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530716.854:11465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.058:11466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.058:11467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.059:11468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530717.092:11469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.092:11470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.102:11471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.102:11472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.103:11473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=56992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530717.135:11474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.135:11475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.149:11476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.150:11477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.151:11478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57015 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530717.183:11479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.183:11480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.193:11481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.193:11482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.194:11483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530717.213:11484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.213:11485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.223:11486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.223:11487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.225:11488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530717.273:11489): pid=57063 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530717.273:11490): pid=57063 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B61716D716D756272616B6D7079647A6A78687A6A716A6563756E666A746771203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731372E303934343935332D35343532312D3134353930313537373437363932352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530717.273:11491): pid=57063 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530717.281:11492): pid=57063 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530717.445:11493): pid=57063 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530717.445:11494): pid=57063 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530717.448:11495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.448:11496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.458:11497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.458:11498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.459:11499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57067 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530717.477:11500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.477:11501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.739:11502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.739:11503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.740:11504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530717.762:11505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.762:11506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.770:11507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.770:11508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.771:11509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57096 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530717.809:11510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.809:11511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.823:11512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.823:11513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.825:11514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57117 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530717.871:11515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.871:11516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.882:11517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.883:11518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.883:11519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57133 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530717.902:11520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530717.902:11521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530717.918:11522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530717.918:11523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530717.919:11524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57154 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530717.972:11525): pid=57169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530717.972:11526): pid=57169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74746D757973617368727371796E6C6E767465786E796C76657963727A787966203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731372E373633313130342D35343532312D3231343531343433313331383539332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530717.973:11527): pid=57169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530717.974:11528): pid=57169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530718.148:11529): pid=57169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530718.149:11530): pid=57169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530718.152:11531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530718.152:11532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530718.164:11533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530718.164:11534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530718.165:11535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57177 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530718.186:11536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530718.186:11537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530718.390:11538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530718.390:11539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530718.391:11540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57192 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530718.412:11541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530718.412:11542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530718.420:11543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530718.420:11544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530718.421:11545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57206 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530718.446:11546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530718.446:11547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530718.459:11548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530718.459:11549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530718.460:11550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57227 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530718.488:11551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530718.488:11552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530718.498:11553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530718.498:11554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530718.499:11555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57241 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530718.526:11556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530718.526:11557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530718.536:11558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530718.536:11559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530718.537:11560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57256 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530718.587:11561): pid=57271 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530718.587:11562): pid=57271 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76796D62656C766E7974706967767A6C67766B79766F70756270666B766F7366203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731382E343131323431352D35343532312D3231323538303834323234323631342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530718.588:11563): pid=57271 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530718.596:11564): pid=57271 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530718.756:11565): pid=57271 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530718.756:11566): pid=57271 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530718.758:11567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530718.759:11568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530718.771:11569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530718.771:11570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530718.771:11571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57282 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530718.792:11572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530718.792:11573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.010:11574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.010:11575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.011:11576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57297 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530719.038:11577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.038:11578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.051:11579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.051:11580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.053:11581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57311 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530719.088:11582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.088:11583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.101:11584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.101:11585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.103:11586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57334 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530719.133:11587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.133:11588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.143:11589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.143:11590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.144:11591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530719.167:11592): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.167:11593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.178:11594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.178:11595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.179:11596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57367 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530719.231:11597): pid=57382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530719.231:11598): pid=57382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68757278717A78687568656C6D736377626F636773706577657A726D726B6766203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731392E303430313037352D35343532312D35303331303737313637393235342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530719.232:11599): pid=57382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530719.234:11600): pid=57382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530719.404:11601): pid=57382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530719.405:11602): pid=57382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530719.407:11603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.408:11604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.419:11605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.419:11606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.420:11607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57392 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530719.439:11608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.439:11609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.631:11610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.631:11611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.632:11612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57407 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530719.652:11613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.653:11614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.661:11615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.661:11616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.662:11617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57421 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530719.682:11618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.682:11619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.696:11620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.696:11621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.700:11622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530719.728:11623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.728:11624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.740:11625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.740:11626): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.741:11627): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530719.758:11628): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.758:11629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.769:11630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.769:11631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.772:11632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57471 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530719.825:11633): pid=57486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530719.825:11634): pid=57486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70796C61616379686F766D71616272656F79616F6578776A6A64766868686C66203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303731392E3635343032382D35343532312D3234313037393431373639383537362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530719.825:11635): pid=57486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530719.826:11636): pid=57486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530719.979:11637): pid=57486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530719.980:11638): pid=57486 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530719.982:11639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530719.983:11640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530719.994:11641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530719.994:11642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530719.995:11643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57490 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.014:11644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.014:11645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.201:11646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.201:11647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.203:11648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.235:11649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.235:11650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.244:11651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.244:11652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.245:11653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.281:11654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.281:11655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.298:11656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.298:11657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.299:11658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57552 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.332:11659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.332:11660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.343:11661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.343:11662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.344:11663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.363:11664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.363:11665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.373:11666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.373:11667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.374:11668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57581 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530720.427:11669): pid=57596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530720.427:11670): pid=57596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727363776B69716263786A796372796466666C6870716374676465657A787961203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303732302E323336383338332D35343532312D37313336393135343435333439392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530720.428:11671): pid=57596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530720.430:11672): pid=57596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530720.588:11673): pid=57596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530720.589:11674): pid=57596 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530720.591:11675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.593:11676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.603:11677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.603:11678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.604:11679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57601 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.624:11680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.624:11681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.817:11682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.817:11683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.818:11684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57622 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.839:11685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.839:11686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.848:11687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.848:11688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.850:11689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57636 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.871:11690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.871:11691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.885:11692): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.885:11693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.886:11694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57657 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.915:11695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.915:11696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.926:11697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.926:11698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.927:11699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57671 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530720.948:11700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530720.949:11701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530720.959:11702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530720.959:11703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530720.960:11704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57686 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530721.016:11705): pid=57701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530721.017:11706): pid=57701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6470726D6B6477797978697A706B676F6E67726863706573726961796C65666A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303732302E3834313234392D35343532312D33333131303836333330323131382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530721.017:11707): pid=57701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530721.019:11708): pid=57701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530721.195:11709): pid=57701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530721.196:11710): pid=57701 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530721.200:11711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530721.200:11712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530721.210:11713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530721.210:11714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530721.211:11715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57705 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530721.235:11716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530721.235:11717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530721.651:11718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530721.651:11719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530721.653:11720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530721.670:11721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530721.670:11722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530721.679:11723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530721.679:11724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530721.680:11725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57751 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530721.700:11726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530721.700:11727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530721.810:11728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530721.810:11729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530721.811:11730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530721.840:11731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530721.840:11732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530721.851:11733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530721.851:11734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530721.852:11735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530721.871:11736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530721.871:11737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530721.881:11738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530721.881:11739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530721.882:11740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57801 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530721.934:11741): pid=57816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530721.934:11742): pid=57816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687270676965696E6E736A61656273767876786674736D68666A7874627A686F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303732312E363731323530332D35373732332D3232323731323831383933343337392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530721.935:11743): pid=57816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530721.936:11744): pid=57816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530722.099:11745): pid=57816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530722.100:11746): pid=57816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530722.102:11747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.102:11748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.117:11749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.117:11750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.118:11751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57821 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530722.144:11752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.145:11753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.154:11754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.154:11755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.155:11756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57835 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530722.178:11757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.178:11758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.195:11759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.195:11760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.196:11761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530722.225:11762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.225:11763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.240:11764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.240:11765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.244:11766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57867 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530722.291:11767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.291:11768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.300:11769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.300:11770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.305:11771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530722.379:11772): pid=57901 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530722.379:11773): pid=57901 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6278756E776B726575666673776B6B6F726C6A6569717779627975756F746F61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303732312E363731323530332D35373732332D3232323731323831383933343337392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530722.379:11774): pid=57901 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530722.381:11775): pid=57901 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530722.559:11776): pid=57901 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530722.559:11777): pid=57901 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530722.562:11778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.563:11779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.576:11780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.576:11781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.577:11782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57905 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530722.601:11783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.601:11784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.865:11785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.865:11786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.866:11787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57928 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530722.884:11788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.884:11789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.893:11790): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.893:11791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.894:11792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57942 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530722.916:11793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.917:11794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.934:11795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.934:11796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.935:11797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530722.983:11798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530722.983:11799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530722.993:11800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530722.993:11801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530722.994:11802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57977 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530723.026:11803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530723.026:11804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530723.038:11805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530723.038:11806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530723.040:11807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=57994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530723.095:11808): pid=58013 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530723.095:11809): pid=58013 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530723.095:11810): pid=58013 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530723.097:11811): pid=58013 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530725.624:11812): prog-id=384 op=LOAD
type=BPF msg=audit(1748530725.626:11813): prog-id=385 op=LOAD
type=SYSCALL msg=audit(1748530725.626:11813): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000125ad0 a2=90 a3=0 items=0 ppid=58091 pid=58103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.626:11813): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61356337336238646661616639326535383137646136643962
type=BPF msg=audit(1748530725.629:11814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.629:11815): prog-id=386 op=LOAD
type=SYSCALL msg=audit(1748530725.629:11815): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000125c48 a2=90 a3=0 items=0 ppid=58091 pid=58103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.629:11815): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61356337336238646661616639326535383137646136643962
type=BPF msg=audit(1748530725.630:11816): prog-id=387 op=LOAD
type=SYSCALL msg=audit(1748530725.630:11816): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001259d8 a2=90 a3=0 items=0 ppid=58091 pid=58103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.630:11816): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61356337336238646661616639326535383137646136643962
type=BPF msg=audit(1748530725.630:11817): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.630:11818): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.630:11819): prog-id=388 op=LOAD
type=SYSCALL msg=audit(1748530725.630:11819): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000125eb0 a2=90 a3=0 items=0 ppid=58091 pid=58103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.630:11819): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61356337336238646661616639326535383137646136643962
type=BPF msg=audit(1748530725.664:11820): prog-id=389 op=LOAD
type=SYSCALL msg=audit(1748530725.664:11820): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012dc48 a2=90 a3=0 items=0 ppid=58106 pid=58134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.664:11820): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623165336462383766633365643935343161613634376333
type=BPF msg=audit(1748530725.664:11821): prog-id=390 op=LOAD
type=SYSCALL msg=audit(1748530725.664:11821): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012d9d8 a2=90 a3=0 items=0 ppid=58106 pid=58134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.664:11821): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623165336462383766633365643935343161613634376333
type=BPF msg=audit(1748530725.664:11822): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.664:11823): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.664:11824): prog-id=391 op=LOAD
type=SYSCALL msg=audit(1748530725.664:11824): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012deb0 a2=90 a3=0 items=0 ppid=58106 pid=58134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.664:11824): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38623165336462383766633365643935343161613634376333
type=BPF msg=audit(1748530725.920:11825): prog-id=392 op=LOAD
type=BPF msg=audit(1748530725.920:11826): prog-id=393 op=LOAD
type=SYSCALL msg=audit(1748530725.920:11826): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=58303 pid=58333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.920:11826): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376339343866386437633061643733353765633465303035
type=BPF msg=audit(1748530725.921:11827): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.921:11828): prog-id=394 op=LOAD
type=SYSCALL msg=audit(1748530725.921:11828): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=58303 pid=58333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.921:11828): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376339343866386437633061643733353765633465303035
type=BPF msg=audit(1748530725.921:11829): prog-id=395 op=LOAD
type=SYSCALL msg=audit(1748530725.921:11829): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=58303 pid=58333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.921:11829): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376339343866386437633061643733353765633465303035
type=BPF msg=audit(1748530725.921:11830): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.921:11831): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.922:11832): prog-id=396 op=LOAD
type=SYSCALL msg=audit(1748530725.922:11832): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=58303 pid=58333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.922:11832): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376339343866386437633061643733353765633465303035
type=BPF msg=audit(1748530725.988:11833): prog-id=397 op=LOAD
type=BPF msg=audit(1748530725.988:11834): prog-id=398 op=LOAD
type=SYSCALL msg=audit(1748530725.988:11834): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=58411 pid=58430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.988:11834): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356531366537303331306632396338656236623762376263
type=BPF msg=audit(1748530725.988:11835): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.988:11836): prog-id=399 op=LOAD
type=SYSCALL msg=audit(1748530725.988:11836): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=58411 pid=58430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.988:11836): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356531366537303331306632396338656236623762376263
type=BPF msg=audit(1748530725.988:11837): prog-id=400 op=LOAD
type=SYSCALL msg=audit(1748530725.988:11837): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=58411 pid=58430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.988:11837): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356531366537303331306632396338656236623762376263
type=BPF msg=audit(1748530725.988:11838): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.988:11839): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530725.988:11840): prog-id=401 op=LOAD
type=SYSCALL msg=audit(1748530725.988:11840): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=58411 pid=58430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530725.988:11840): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356531366537303331306632396338656236623762376263
type=BPF msg=audit(1748530726.052:11841): prog-id=402 op=LOAD
type=BPF msg=audit(1748530726.052:11842): prog-id=403 op=LOAD
type=SYSCALL msg=audit(1748530726.052:11842): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bad0 a2=90 a3=0 items=0 ppid=58447 pid=58491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530726.052:11842): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653961623161346666613463393731326333653935303534
type=BPF msg=audit(1748530726.052:11843): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530726.052:11844): prog-id=404 op=LOAD
type=SYSCALL msg=audit(1748530726.052:11844): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bc48 a2=90 a3=0 items=0 ppid=58447 pid=58491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530726.052:11844): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653961623161346666613463393731326333653935303534
type=BPF msg=audit(1748530726.052:11845): prog-id=405 op=LOAD
type=SYSCALL msg=audit(1748530726.052:11845): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011b9d8 a2=90 a3=0 items=0 ppid=58447 pid=58491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530726.052:11845): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653961623161346666613463393731326333653935303534
type=BPF msg=audit(1748530726.052:11846): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530726.052:11847): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530726.052:11848): prog-id=406 op=LOAD
type=SYSCALL msg=audit(1748530726.052:11848): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011beb0 a2=90 a3=0 items=0 ppid=58447 pid=58491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530726.052:11848): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36653961623161346666613463393731326333653935303534
type=USER_END msg=audit(1748530726.205:11849): pid=58013 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530726.205:11850): pid=58013 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530726.208:11851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530726.208:11852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530726.218:11853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530726.218:11854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530726.219:11855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=58774 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530726.247:11856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530726.248:11857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=BPF msg=audit(1748530726.578:11858): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1748530726.810:11859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530726.810:11860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530726.811:11861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59241 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530726.836:11862): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530726.836:11863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530726.849:11864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530726.849:11865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530726.850:11866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530726.876:11867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530726.876:11868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530726.894:11869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530726.894:11870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530726.898:11871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530726.950:11872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530726.950:11873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530726.960:11874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530726.960:11875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530726.963:11876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530726.984:11877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530726.984:11878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530726.996:11879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530726.996:11880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530726.998:11881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59316 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530727.068:11882): pid=59331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530727.068:11883): pid=59331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70636B716C716263697A73617A70616566736175636D69626F7675656E74766D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303732362E3833393239322D35393034312D3130323137383833343439323733302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530727.069:11884): pid=59331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530727.072:11885): pid=59331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530727.372:11886): pid=59331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530727.372:11887): pid=59331 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530727.374:11888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530727.374:11889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530727.389:11890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530727.389:11891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530727.392:11892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59343 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530727.417:11893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530727.417:11894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530727.682:11895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530727.682:11896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530727.684:11897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59367 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530727.723:11898): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530727.723:11899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530727.733:11900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530727.735:11901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530727.736:11902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59381 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530727.779:11903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530727.779:11904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530727.797:11905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530727.797:11906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530727.800:11907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59407 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530727.849:11908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530727.849:11909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530727.863:11910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530727.863:11911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530727.865:11912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59421 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530727.889:11913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530727.889:11914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530727.899:11915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530727.900:11916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530727.902:11917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59436 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530727.976:11918): pid=59451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530727.976:11919): pid=59451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716778746573717761706870687567627977666A717377796266666B616C6D79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303732372E373235363639342D35393034312D3234313435353838343937353037342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530727.977:11920): pid=59451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530727.978:11921): pid=59451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530728.299:11922): pid=59451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530728.299:11923): pid=59451 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530728.305:11924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530728.305:11925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530728.316:11926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530728.316:11927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530728.318:11928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530728.347:11929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530728.347:11930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530728.592:11931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530728.592:11932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530728.593:11933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59486 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530728.624:11934): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530728.624:11935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530728.635:11936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530728.635:11937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530728.636:11938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530728.689:11939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530728.689:11940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530728.707:11941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530728.707:11942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530728.709:11943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59525 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530728.759:11944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530728.763:11945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530728.774:11946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530728.774:11947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530728.775:11948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59539 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530728.806:11949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530728.806:11950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530728.816:11951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530728.819:11952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530728.820:11953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=59554 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530728.892:11954): pid=59569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530728.892:11955): pid=59569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C70616D666F787071756D67787279696B6E66617175636D7065637A6C726D70203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303732382E3632363134372D35393034312D333336323535323132323035332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530728.892:11956): pid=59569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530728.896:11957): pid=59569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530735.731:11958): pid=59569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530735.731:11959): pid=59569 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530735.734:11960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530735.734:11961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530735.743:11962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530735.743:11963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530735.745:11964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530735.773:11965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530735.773:11966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530736.017:11967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530736.017:11968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530736.018:11969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60064 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530736.044:11970): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530736.044:11971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530736.057:11972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530736.057:11973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530736.058:11974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60078 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530736.079:11975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530736.079:11976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530736.093:11977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530736.096:11978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530736.096:11979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60099 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530736.134:11980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530736.134:11981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530736.147:11982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530736.147:11983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530736.149:11984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530736.173:11985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530736.173:11986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530736.186:11987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530736.186:11988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530736.188:11989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60129 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530736.262:11990): pid=60144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530736.262:11991): pid=60144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75666377657A716D61616771737978627961636B786C686469746D777071766B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303733362E303436303832372D35393034312D3232363230313139313734393737362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530736.262:11992): pid=60144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530736.267:11993): pid=60144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530749.811:11994): pid=60144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530749.811:11995): pid=60144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530749.815:11996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530749.816:11997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530749.826:11998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530749.826:11999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530749.827:12000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60520 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530749.850:12001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530749.850:12002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.109:12003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.109:12004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.110:12005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60541 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530750.127:12006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.127:12007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.137:12008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.137:12009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.141:12010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60555 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530750.160:12011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.160:12012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.176:12013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.176:12014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.177:12015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530750.209:12016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.209:12017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.220:12018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.220:12019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.221:12020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530750.239:12021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.239:12022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.250:12023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.251:12024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.252:12025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60605 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530750.302:12026): pid=60620 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530750.302:12027): pid=60620 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62656A7867707A636A6266706B7A7A6169636175736F747A6678717072647A62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735302E313238383036342D35393034312D353837323234303035333233322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530750.302:12028): pid=60620 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530750.304:12029): pid=60620 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530750.589:12030): pid=60620 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530750.589:12031): pid=60620 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530750.592:12032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.592:12033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.602:12034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.602:12035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.603:12036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60634 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530750.621:12037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.621:12038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.839:12039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.839:12040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.840:12041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60656 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530750.857:12042): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.857:12043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.866:12044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.866:12045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.867:12046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530750.891:12047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.892:12048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.907:12049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.907:12050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.908:12051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60695 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530750.937:12052): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.937:12053): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.950:12054): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.950:12055): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.951:12056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530750.970:12057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530750.970:12058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530750.981:12059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530750.981:12060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530750.983:12061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60724 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530751.056:12062): pid=60739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530751.056:12063): pid=60739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657262786B6E6E73726B67756C78756A6568657A63686270706265756D647963203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735302E383538353938352D36303635322D3231383330353936353439383134302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530751.058:12064): pid=60739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530751.060:12065): pid=60739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530751.291:12066): pid=60739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530751.292:12067): pid=60739 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530751.294:12068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530751.295:12069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530751.306:12070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530751.307:12071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530751.308:12072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60743 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530751.327:12073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530751.328:12074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530751.559:12075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530751.559:12076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530751.560:12077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60766 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530751.578:12078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530751.578:12079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530751.588:12080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530751.588:12081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530751.589:12082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530751.634:12083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530751.634:12084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530751.650:12085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530751.650:12086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530751.651:12087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60801 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530751.683:12088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530751.683:12089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530751.695:12090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530751.695:12091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530751.696:12092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530751.716:12093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530751.716:12094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530751.727:12095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530751.727:12096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530751.728:12097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60833 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530751.782:12098): pid=60848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530751.782:12099): pid=60848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69766C62726C6C7475666D6C6E796F716879716B6B756C6B746B696779777567203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735312E353739333039352D36303735382D3237383230353434353531343839302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530751.782:12100): pid=60848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530751.784:12101): pid=60848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530751.947:12102): pid=60848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530751.947:12103): pid=60848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530751.949:12104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530751.950:12105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530751.961:12106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530751.962:12107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530751.963:12108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60852 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530751.984:12109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530751.984:12110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530752.279:12111): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530752.279:12112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530752.280:12113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530752.302:12114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530752.302:12115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530752.313:12116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530752.314:12117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530752.315:12118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60897 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530752.338:12119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530752.339:12120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530752.353:12121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530752.354:12122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530752.355:12123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530752.386:12124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530752.386:12125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530752.400:12126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530752.400:12127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530752.401:12128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60932 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530752.419:12129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530752.419:12130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530752.430:12131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530752.430:12132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530752.431:12133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60947 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530752.484:12134): pid=60962 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530752.485:12135): pid=60962 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6570697472706474706C6266686C79687A62627177657278706978777271616C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735322E333034303035342D36303837302D3136343437383833363439313238322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530752.485:12136): pid=60962 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530752.487:12137): pid=60962 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530752.665:12138): pid=60962 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530752.666:12139): pid=60962 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530752.670:12140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530752.670:12141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530752.680:12142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530752.680:12143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530752.681:12144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60967 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530752.703:12145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530752.703:12146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.028:12147): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.028:12148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.029:12149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=60990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530753.050:12150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.050:12151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.059:12152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.059:12153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.060:12154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61004 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530753.083:12155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.083:12156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.098:12157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.098:12158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.100:12159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530753.138:12160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.138:12161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.149:12162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.149:12163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.151:12164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61039 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530753.179:12165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.179:12166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.189:12167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.189:12168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.190:12169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61056 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530753.243:12170): pid=61071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530753.243:12171): pid=61071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71646B6A7977677171736F7A636D6A666D646F76796E69756E6A667675786865203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735332E303531333031352D36303938322D3138373034393232313033333735322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530753.244:12172): pid=61071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530753.246:12173): pid=61071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530753.418:12174): pid=61071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530753.418:12175): pid=61071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530753.420:12176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.420:12177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.432:12178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.433:12179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.434:12180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61079 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530753.451:12181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.452:12182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.694:12183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.694:12184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.695:12185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530753.714:12186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.714:12187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.723:12188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.723:12189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.726:12190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61115 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530753.747:12191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.747:12192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.762:12193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.762:12194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.764:12195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61136 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530753.793:12196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.793:12197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.807:12198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.807:12199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.808:12200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61150 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530753.827:12201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530753.827:12202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530753.838:12203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530753.838:12204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530753.839:12205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530753.907:12206): pid=61180 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530753.907:12207): pid=61180 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D706B646166727470696E77717A77756379666B776369656474786368666A6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735332E3731353334372D36303938322D34313736343731333238353630332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530753.908:12208): pid=61180 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530753.909:12209): pid=61180 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530754.083:12210): pid=61180 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530754.084:12211): pid=61180 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530754.086:12212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530754.086:12213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530754.098:12214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530754.098:12215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530754.099:12216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61184 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530754.121:12217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530754.121:12218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530754.339:12219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530754.339:12220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530754.340:12221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530754.363:12222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530754.363:12223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530754.372:12224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530754.372:12225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530754.375:12226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530754.412:12227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530754.412:12228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530754.423:12229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530754.423:12230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530754.427:12231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61240 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530754.477:12232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530754.477:12233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530754.489:12234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530754.489:12235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530754.491:12236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61256 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530754.512:12237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530754.512:12238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530754.523:12239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530754.523:12240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530754.524:12241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61275 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530754.575:12242): pid=61290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530754.575:12243): pid=61290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746B726D6D63656677716474777A716566766D64727973676F626A7A7676776E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735342E333635303835382D36303938322D35323838313031303739313936322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530754.575:12244): pid=61290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530754.577:12245): pid=61290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530754.757:12246): pid=61290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530754.757:12247): pid=61290 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530754.760:12248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530754.760:12249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530754.771:12250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530754.771:12251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530754.773:12252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61294 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530754.799:12253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530754.799:12254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530754.991:12255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530754.991:12256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530754.993:12257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61311 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530755.012:12258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.012:12259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.021:12260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.021:12261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.023:12262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530755.043:12263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.044:12264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.057:12265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.057:12266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.058:12267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61346 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530755.087:12268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.087:12269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.098:12270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.098:12271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.099:12272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61360 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530755.117:12273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.117:12274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.130:12275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.130:12276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.131:12277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61377 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530755.180:12278): pid=61392 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530755.180:12279): pid=61392 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F76766A78766C6769656A6F766C677973616F77676D766379666D78627162203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735352E303134303636352D36303938322D3232393237333333313637313834342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530755.180:12280): pid=61392 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530755.182:12281): pid=61392 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530755.345:12282): pid=61392 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530755.345:12283): pid=61392 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530755.347:12284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.348:12285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.358:12286): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.358:12287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.359:12288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530755.378:12289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.378:12290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.574:12291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.575:12292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.578:12293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530755.607:12294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.607:12295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.617:12296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.617:12297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.618:12298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530755.661:12299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.661:12300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.674:12301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.677:12302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.678:12303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61461 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530755.724:12304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.724:12305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.739:12306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.739:12307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.741:12308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61475 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530755.770:12309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530755.770:12310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530755.779:12311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530755.780:12312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530755.781:12313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61490 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530755.831:12314): pid=61505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530755.831:12315): pid=61505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B72756A6F64626A7976796A72696D726D6B7A7576706C70666A717861796166203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735352E36303939382D36303938322D3232393334373239393631303137352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530755.831:12316): pid=61505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530755.833:12317): pid=61505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530755.996:12318): pid=61505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530755.997:12319): pid=61505 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530756.000:12320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530756.000:12321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530756.011:12322): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530756.011:12323): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530756.012:12324): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530756.030:12325): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530756.030:12326): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530756.221:12327): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530756.221:12328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530756.222:12329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61532 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530756.241:12330): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530756.241:12331): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530756.252:12332): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530756.253:12333): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530756.254:12334): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61546 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530756.276:12335): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530756.276:12336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530756.291:12337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530756.291:12338): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530756.292:12339): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61567 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530756.356:12340): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530756.356:12341): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530756.366:12342): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530756.366:12343): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530756.368:12344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61581 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530756.406:12345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530756.406:12346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530756.417:12347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530756.417:12348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530756.419:12349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530756.501:12350): pid=61611 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530756.501:12351): pid=61611 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756269746676786C706B717870636E6464786E686F63726D75796E746B766E77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735362E323432383539342D36303938322D3233303236313130323638303633302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530756.501:12352): pid=61611 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530756.503:12353): pid=61611 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530756.686:12354): pid=61611 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530756.686:12355): pid=61611 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530756.688:12356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530756.689:12357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530756.701:12358): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530756.701:12359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530756.702:12360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61619 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530756.725:12361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530756.725:12362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530756.936:12363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530756.936:12364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530756.937:12365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61650 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530756.962:12366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530756.962:12367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530756.970:12368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530756.970:12369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530756.971:12370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61664 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530757.001:12371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530757.001:12372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530757.015:12373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530757.015:12374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530757.017:12375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61687 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530757.047:12376): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530757.047:12377): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530757.057:12378): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530757.057:12379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530757.058:12380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61701 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530757.075:12381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530757.075:12382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530757.086:12383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530757.086:12384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530757.087:12385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61720 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530757.141:12386): pid=61735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530757.141:12387): pid=61735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74646E69767872716F7A6A7A6C616278766E626D6E7673667568626775656376203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735362E3936333135322D36303938322D3235323533333038313838333833362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530757.142:12388): pid=61735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530757.147:12389): pid=61735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530757.348:12390): pid=61735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530757.349:12391): pid=61735 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530757.351:12392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530757.351:12393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530757.363:12394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530757.363:12395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530757.364:12396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530757.383:12397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530757.383:12398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530757.617:12399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530757.618:12400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530757.618:12401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61754 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530757.636:12402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530757.636:12403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530757.645:12404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530757.645:12405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530757.646:12406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61768 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530757.689:12407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530757.689:12408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530757.702:12409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530757.702:12410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530757.703:12411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530757.736:12412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530757.737:12413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530757.748:12414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530757.748:12415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530757.752:12416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61803 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530757.772:12417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530757.772:12418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530757.783:12419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530757.783:12420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530757.784:12421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530757.837:12422): pid=61839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530757.837:12423): pid=61839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777765636A786E766D617A72676D7973766B6B767A6D77646F776575646D6E6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735372E363338323535342D36303938322D31353437333632313438323334372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530757.837:12424): pid=61839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530757.839:12425): pid=61839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530758.022:12426): pid=61839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530758.022:12427): pid=61839 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530758.027:12428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.027:12429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.038:12430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.038:12431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.040:12432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530758.069:12433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.069:12434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.274:12435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.274:12436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.276:12437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61865 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530758.293:12438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.293:12439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.302:12440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.302:12441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.303:12442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61879 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530758.325:12443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.325:12444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.339:12445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.339:12446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.340:12447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61900 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530758.370:12448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.370:12449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.381:12450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.381:12451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.382:12452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61914 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530758.402:12453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.402:12454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.413:12455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.413:12456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.414:12457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61929 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530758.478:12458): pid=61944 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530758.478:12459): pid=61944 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66796E6B626D70626B706877786D73747A6D6E6C7A636A7571686B636D706F73203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735382E323935303630342D36303938322D3231363632363931313436393833302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530758.478:12460): pid=61944 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530758.480:12461): pid=61944 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530758.636:12462): pid=61944 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530758.637:12463): pid=61944 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530758.639:12464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.640:12465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.650:12466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.650:12467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.651:12468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61954 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530758.680:12469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.680:12470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.903:12471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.903:12472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.904:12473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61969 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530758.922:12474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.922:12475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.931:12476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.931:12477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.932:12478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=61983 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530758.954:12479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530758.954:12480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530758.970:12481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530758.971:12482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530758.972:12483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62004 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530759.001:12484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.001:12485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530759.012:12486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530759.012:12487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530759.013:12488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62018 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530759.032:12489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.032:12490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530759.043:12491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530759.044:12492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530759.045:12493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530759.095:12494): pid=62048 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530759.095:12495): pid=62048 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7379706E78766B6B72676C61626963637A6B73676374796B7966797961777975203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735382E3932333431362D36303938322D3236323338373231363732363233302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530759.096:12496): pid=62048 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530759.097:12497): pid=62048 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530759.250:12498): pid=62048 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530759.250:12499): pid=62048 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530759.254:12500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.254:12501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530759.265:12502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530759.265:12503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530759.266:12504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62054 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530759.287:12505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.288:12506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530759.529:12507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530759.529:12508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530759.530:12509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62080 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530759.548:12510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.548:12511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530759.557:12512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530759.557:12513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530759.558:12514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62094 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530759.581:12515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.582:12516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530759.598:12517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530759.598:12518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530759.599:12519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62115 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530759.646:12520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.646:12521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530759.663:12522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530759.663:12523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530759.664:12524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62129 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530759.694:12525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.694:12526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530759.705:12527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530759.705:12528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530759.707:12529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530759.756:12530): pid=62159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530759.756:12531): pid=62159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78617A736D72766363656D6E686673766673636A796C697863637A707666776D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303735392E3534393137322D36303938322D3131383032303438303338343438362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530759.756:12532): pid=62159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530759.758:12533): pid=62159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530759.909:12534): pid=62159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530759.909:12535): pid=62159 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530759.912:12536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.912:12537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530759.923:12538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530759.923:12539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530759.924:12540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530759.954:12541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530759.954:12542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.139:12543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.139:12544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.140:12545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62184 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530760.159:12546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.159:12547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.169:12548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.169:12549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.170:12550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530760.190:12551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.190:12552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.206:12553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.206:12554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.207:12555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530760.237:12556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.238:12557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.249:12558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.249:12559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.250:12560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62233 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530760.269:12561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.269:12562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.279:12563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.279:12564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.280:12565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62248 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530760.334:12566): pid=62263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530760.334:12567): pid=62263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A647761666566666F65726F6C67716672697067756969736E6E616E636967203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736302E313631323638372D36303938322D37343135353733353032373434342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530760.334:12568): pid=62263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530760.336:12569): pid=62263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530760.495:12570): pid=62263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530760.496:12571): pid=62263 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530760.499:12572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.499:12573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.510:12574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.510:12575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.511:12576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62267 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530760.530:12577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.530:12578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.743:12579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.743:12580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.744:12581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62282 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530760.761:12582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.761:12583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.772:12584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.772:12585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.773:12586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62296 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530760.810:12587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.810:12588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.827:12589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.827:12590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.829:12591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62319 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530760.875:12592): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.875:12593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.889:12594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.889:12595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.891:12596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62339 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530760.909:12597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530760.909:12598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530760.917:12599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530760.918:12600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530760.919:12601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62358 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530760.971:12602): pid=62373 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530760.971:12603): pid=62373 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7A66686A746F6370786A796A677862766D74667167796E776E6C6469656764203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736302E373632363934342D36303938322D33303735363038303631353635342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530760.972:12604): pid=62373 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530760.973:12605): pid=62373 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530761.133:12606): pid=62373 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530761.134:12607): pid=62373 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530761.136:12608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530761.137:12609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530761.147:12610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530761.147:12611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530761.148:12612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62377 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530761.167:12613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530761.167:12614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530761.374:12615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530761.374:12616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530761.376:12617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62392 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530761.392:12618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530761.392:12619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530761.402:12620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530761.402:12621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530761.403:12622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62406 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530761.426:12623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530761.426:12624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530761.437:12625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530761.437:12626): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530761.438:12627): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62427 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530761.468:12628): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530761.469:12629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530761.479:12630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530761.479:12631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530761.480:12632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62441 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530761.500:12633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530761.501:12634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530761.511:12635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530761.512:12636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530761.512:12637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530761.568:12638): pid=62471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530761.568:12639): pid=62471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62736C6D766C6B686B7164647473617A6463666374657375727566646F766578203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736312E333934303433322D36303938322D3232343636363437323734353136352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530761.568:12640): pid=62471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530761.570:12641): pid=62471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530761.721:12642): pid=62471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530761.721:12643): pid=62471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530761.724:12644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530761.724:12645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530761.736:12646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530761.736:12647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530761.737:12648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62481 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530761.755:12649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530761.755:12650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530761.980:12651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530761.980:12652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530761.981:12653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530762.000:12654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.001:12655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.010:12656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.011:12657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.012:12658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62517 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530762.036:12659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.036:12660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.051:12661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.051:12662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.052:12663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530762.101:12664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.101:12665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.112:12666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.112:12667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.113:12668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62556 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530762.150:12669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.150:12670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.160:12671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.160:12672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.162:12673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62571 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530762.211:12674): pid=62586 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530762.211:12675): pid=62586 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73616279786F65656B73737476616772696F706B6973726A71736C796A657976203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736322E3030323031382D36303938322D3235383531373337363931393439362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530762.212:12676): pid=62586 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530762.213:12677): pid=62586 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530762.371:12678): pid=62586 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530762.371:12679): pid=62586 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530762.374:12680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.374:12681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.384:12682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.384:12683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.385:12684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530762.406:12685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.406:12686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.620:12687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.620:12688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.621:12689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62611 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530762.652:12690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.652:12691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.661:12692): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.664:12693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.666:12694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62625 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530762.717:12695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.717:12696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.734:12697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.734:12698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.735:12699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62646 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530762.789:12700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.789:12701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.803:12702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.803:12703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.804:12704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530762.826:12705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530762.826:12706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530762.838:12707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530762.838:12708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530762.839:12709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62675 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530762.901:12710): pid=62690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530762.901:12711): pid=62690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7179737271677A656E6F736D7479756971686473616D65646E676A79716B6674203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736322E363533323239322D36303938322D3136323739313139363339323930392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530762.902:12712): pid=62690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530762.903:12713): pid=62690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530763.082:12714): pid=62690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530763.082:12715): pid=62690 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530763.085:12716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.086:12717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.098:12718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.098:12719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.099:12720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62694 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530763.120:12721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.120:12722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.318:12723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.318:12724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.319:12725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62721 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530763.341:12726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.341:12727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.350:12728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.350:12729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.352:12730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62735 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530763.371:12731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.371:12732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.385:12733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.385:12734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.386:12735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530763.414:12736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.414:12737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.425:12738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.425:12739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.428:12740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62770 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530763.444:12741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.444:12742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.455:12743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.456:12744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.457:12745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530763.511:12746): pid=62800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530763.512:12747): pid=62800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67686E6C786179736A6C6A79706978746673716A6E6279696E70676E6B68716A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736332E333433303236362D36303938322D3130343130353331393333313738352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530763.512:12748): pid=62800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530763.513:12749): pid=62800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530763.693:12750): pid=62800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530763.694:12751): pid=62800 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530763.696:12752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.696:12753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.707:12754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.707:12755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.708:12756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62804 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530763.729:12757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.729:12758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.912:12759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.913:12760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.914:12761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62819 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530763.938:12762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.938:12763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.950:12764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.950:12765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.951:12766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62835 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530763.974:12767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530763.975:12768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530763.990:12769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530763.990:12770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530763.993:12771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530764.022:12772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.022:12773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530764.033:12774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530764.033:12775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530764.034:12776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62874 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530764.051:12777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.051:12778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530764.062:12779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530764.062:12780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530764.063:12781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530764.112:12782): pid=62904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530764.112:12783): pid=62904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73687069656A7A6777706E667A706976707163627A6278747668796877706C62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736332E393430313538312D36303938322D37323032393132313635393937392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530764.112:12784): pid=62904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530764.114:12785): pid=62904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530764.289:12786): pid=62904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530764.290:12787): pid=62904 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530764.293:12788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.293:12789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530764.308:12790): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530764.308:12791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530764.309:12792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62908 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530764.330:12793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.330:12794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530764.549:12795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530764.549:12796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530764.550:12797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62929 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530764.568:12798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.569:12799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530764.578:12800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530764.578:12801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530764.579:12802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62943 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530764.609:12803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.610:12804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530764.624:12805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530764.624:12806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530764.626:12807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62964 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530764.659:12808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.659:12809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530764.670:12810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530764.670:12811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530764.671:12812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530764.690:12813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.690:12814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530764.702:12815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530764.702:12816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530764.703:12817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=62994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530764.763:12818): pid=63010 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530764.763:12819): pid=63010 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766165616A776A61766C796B776C7766766C6C736E746579666E766770637A6E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736342E353730393730352D36303938322D3234363935333838333430313731392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530764.763:12820): pid=63010 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530764.765:12821): pid=63010 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530764.926:12822): pid=63010 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530764.926:12823): pid=63010 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530764.929:12824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.930:12825): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530764.940:12826): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530764.940:12827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530764.941:12828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63018 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530764.960:12829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530764.960:12830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.151:12831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.151:12832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.152:12833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63035 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530765.170:12834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.170:12835): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.179:12836): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.179:12837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.180:12838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63049 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530765.201:12839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.201:12840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.216:12841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.216:12842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.217:12843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63070 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530765.246:12844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.246:12845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.258:12846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.258:12847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.259:12848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63084 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530765.279:12849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.280:12850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.290:12851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.290:12852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.292:12853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63099 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530765.347:12854): pid=63114 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530765.347:12855): pid=63114 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A697971767470687077727474786A6974766D6165776765646F64676C676E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736352E313731363034322D36303938322D38313138383531343937363738302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530765.348:12856): pid=63114 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530765.350:12857): pid=63114 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530765.531:12858): pid=63114 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530765.531:12859): pid=63114 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530765.533:12860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.534:12861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.545:12862): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.545:12863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.546:12864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530765.567:12865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.567:12866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.768:12867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.768:12868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.769:12869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63141 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530765.788:12870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.788:12871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.798:12872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.798:12873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.799:12874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63159 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530765.826:12875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.826:12876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.842:12877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.842:12878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.847:12879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63180 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530765.881:12880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.881:12881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.893:12882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.894:12883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.895:12884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530765.916:12885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530765.916:12886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530765.929:12887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530765.929:12888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530765.931:12889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63209 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530765.987:12890): pid=63224 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530765.987:12891): pid=63224 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6375676C7A766D677A6261656C767173616561626761717275736262617A7064203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736352E373839363537382D36303938322D3138333439363331393733343339372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530765.987:12892): pid=63224 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530765.989:12893): pid=63224 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530766.141:12894): pid=63224 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530766.141:12895): pid=63224 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530766.143:12896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530766.144:12897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530766.154:12898): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530766.155:12899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530766.155:12900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530766.174:12901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530766.174:12902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530766.360:12903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530766.360:12904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530766.361:12905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63249 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530766.380:12906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530766.380:12907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530766.389:12908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530766.389:12909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530766.391:12910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63263 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530766.413:12911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530766.413:12912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530766.428:12913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530766.428:12914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530766.429:12915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63284 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530766.477:12916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530766.477:12917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530766.490:12918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530766.490:12919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530766.491:12920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63298 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530766.524:12921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530766.524:12922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530766.533:12923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530766.537:12924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530766.539:12925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63313 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530766.594:12926): pid=63328 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530766.594:12927): pid=63328 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A786B6B6F6B6962667869726766687767706B6E7A716D7765757A6264776D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736362E333831383636322D36303938322D3235343135363936373134383238362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530766.594:12928): pid=63328 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530766.596:12929): pid=63328 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530766.756:12930): pid=63328 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530766.756:12931): pid=63328 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530766.759:12932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530766.759:12933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530766.770:12934): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530766.770:12935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530766.771:12936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63332 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530766.793:12937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530766.793:12938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.028:12939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.028:12940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.029:12941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530767.050:12942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.050:12943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.060:12944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.061:12945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.062:12946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63377 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530767.090:12947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.090:12948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.106:12949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.106:12950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.107:12951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530767.141:12952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.141:12953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.152:12954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.152:12955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.152:12956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63412 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530767.173:12957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.174:12958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.184:12959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.184:12960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.185:12961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63427 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530767.235:12962): pid=63442 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530767.236:12963): pid=63442 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78686971656B76726A796E6467696771647A64687372696D78776D7668627771203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736372E303531383931362D36303938322D3136353030343630383832383430312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530767.236:12964): pid=63442 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530767.239:12965): pid=63442 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530767.397:12966): pid=63442 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530767.397:12967): pid=63442 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530767.400:12968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.400:12969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.410:12970): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.410:12971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.411:12972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63446 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530767.429:12973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.429:12974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.636:12975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.636:12976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.637:12977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63461 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530767.658:12978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.659:12979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.670:12980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.670:12981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.672:12982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63475 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530767.701:12983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.701:12984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.717:12985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.717:12986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.720:12987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530767.769:12988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.769:12989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.780:12990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.780:12991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.781:12992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63516 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530767.805:12993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530767.805:12994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530767.815:12995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530767.815:12996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530767.816:12997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530767.866:12998): pid=63546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530767.866:12999): pid=63546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A796C617470627161616C7A6A6C636767666477656F6568707066726F626871203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736372E3636303633312D36303938322D3232393339303431343735343537302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530767.866:13000): pid=63546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530767.868:13001): pid=63546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530768.034:13002): pid=63546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530768.035:13003): pid=63546 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530768.037:13004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.039:13005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.049:13006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.049:13007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.050:13008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530768.070:13009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.070:13010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.297:13011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.297:13012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.300:13013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63571 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530768.319:13014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.320:13015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.330:13016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.330:13017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.330:13018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530768.356:13019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.356:13020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.372:13021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.372:13022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.373:13023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530768.401:13024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.401:13025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.412:13026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.412:13027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.415:13028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530768.449:13029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.449:13030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.459:13031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.460:13032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.461:13033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63635 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530768.516:13034): pid=63650 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530768.516:13035): pid=63650 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7176636D6C7A69666672656B746C7964796E667A737A776271796E626C746371203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736382E333231303333352D36303938322D3235313035323739353839363236372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530768.516:13036): pid=63650 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530768.518:13037): pid=63650 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530768.669:13038): pid=63650 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530768.669:13039): pid=63650 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530768.671:13040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.672:13041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.682:13042): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.682:13043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.683:13044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530768.701:13045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.701:13046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.884:13047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.885:13048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.886:13049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63675 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530768.903:13050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.903:13051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.912:13052): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.912:13053): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.913:13054): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63689 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530768.934:13055): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.934:13056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530768.960:13057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530768.960:13058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530768.961:13059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63710 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530768.993:13060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530768.993:13061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530769.006:13062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530769.006:13063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530769.007:13064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63724 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530769.030:13065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530769.030:13066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530769.041:13067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530769.041:13068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530769.042:13069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530769.095:13070): pid=63754 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530769.095:13071): pid=63754 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636174706C736661627774676A746D72786270656F7A77766C736C77676D7363203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736382E393034393136352D36303938322D3235373033393932323331383934392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530769.096:13072): pid=63754 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530769.097:13073): pid=63754 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530769.266:13074): pid=63754 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530769.267:13075): pid=63754 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530769.269:13076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530769.270:13077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530769.284:13078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530769.284:13079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530769.285:13080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63760 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530769.308:13081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530769.308:13082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530769.487:13083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530769.487:13084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530769.488:13085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530769.507:13086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530769.507:13087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530769.515:13088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530769.515:13089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530769.517:13090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63799 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530769.542:13091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530769.542:13092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530769.556:13093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530769.556:13094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530769.557:13095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530769.587:13096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530769.587:13097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530769.597:13098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530769.597:13099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530769.598:13100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530769.619:13101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530769.619:13102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530769.630:13103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530769.630:13104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530769.631:13105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530769.680:13106): pid=63864 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530769.680:13107): pid=63864 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7472666E6D796C766C7767686D76786E756263706F626D6D7876707778646469203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303736392E353038323933342D36303938322D3137393535363735323733383530362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530769.680:13108): pid=63864 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530769.682:13109): pid=63864 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530769.838:13110): pid=63864 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530769.838:13111): pid=63864 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530769.841:13112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530769.841:13113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530769.853:13114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530769.853:13115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530769.854:13116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530769.873:13117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530769.873:13118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.063:13119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.063:13120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.067:13121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530770.083:13122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.083:13123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.092:13124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.092:13125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.093:13126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530770.114:13127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.114:13128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.129:13129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.129:13130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.130:13131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530770.159:13132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.159:13133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.170:13134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.170:13135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.171:13136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530770.191:13137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.191:13138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.202:13139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.202:13140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.203:13141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63953 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530770.254:13142): pid=63969 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530770.255:13143): pid=63969 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677A736F6D6263756562676D786B73646461736E6A68777475736B7764757869203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303737302E3038343730332D36303938322D38343736303235333036393534332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530770.255:13144): pid=63969 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530770.257:13145): pid=63969 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530770.427:13146): pid=63969 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530770.427:13147): pid=63969 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530770.432:13148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.433:13149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.444:13150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.445:13151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.446:13152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63974 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530770.465:13153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.465:13154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.667:13155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.667:13156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.668:13157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=63995 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530770.689:13158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.689:13159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.698:13160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.698:13161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.699:13162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530770.721:13163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.721:13164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.736:13165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.736:13166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.737:13167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64032 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530770.766:13168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.766:13169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.777:13170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.777:13171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.778:13172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530770.798:13173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530770.798:13174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530770.808:13175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530770.808:13176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530770.809:13177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64065 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530770.867:13178): pid=64080 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530770.868:13179): pid=64080 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6461617A78717468627A65616B7374696962736C7376697A6E6C776A6A636177203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303737302E363930363039322D36303938322D3237393634373039363335353838362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530770.868:13180): pid=64080 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530770.870:13181): pid=64080 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530771.047:13182): pid=64080 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530771.048:13183): pid=64080 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530771.051:13184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530771.051:13185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530771.063:13186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530771.063:13187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530771.064:13188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64084 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530771.084:13189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530771.084:13190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530771.288:13191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530771.288:13192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530771.289:13193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64099 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530771.311:13194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530771.311:13195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530771.323:13196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530771.323:13197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530771.327:13198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530771.355:13199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530771.355:13200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530771.373:13201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530771.373:13202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530771.374:13203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530771.406:13204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530771.406:13205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530771.416:13206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530771.416:13207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530771.418:13208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64150 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530771.436:13209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530771.436:13210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530771.447:13211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530771.447:13212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530771.448:13213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64169 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530771.500:13214): pid=64184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530771.501:13215): pid=64184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C717478706A7378677A69756863706C66757A6F7966797168706972716B7972203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303737312E3331333739382D36303938322D31383933353931373633333039312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530771.501:13216): pid=64184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530771.503:13217): pid=64184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530771.667:13218): pid=64184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530771.667:13219): pid=64184 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530771.669:13220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530771.669:13221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530771.680:13222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530771.680:13223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530771.681:13224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530771.698:13225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530771.698:13226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.032:13227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.032:13228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.033:13229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64214 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530772.052:13230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.052:13231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.061:13232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.061:13233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.063:13234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530772.090:13235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.090:13236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.204:13237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.204:13238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.205:13239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530772.234:13240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.234:13241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.244:13242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.244:13243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.245:13244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530772.263:13245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.263:13246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.273:13247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.273:13248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.274:13249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64287 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530772.324:13250): pid=64302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530772.324:13251): pid=64302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B646374636A6274706D746364737272657568716861636E71767A6262726D71203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303737322E303533343934372D36343231322D3134343838353338363935313438322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530772.325:13252): pid=64302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530772.326:13253): pid=64302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530772.484:13254): pid=64302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530772.484:13255): pid=64302 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530772.487:13256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.487:13257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.500:13258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.500:13259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.501:13260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530772.520:13261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.520:13262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.530:13263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.530:13264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.531:13265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64321 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530772.550:13266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.550:13267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.565:13268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.565:13269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.566:13270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64337 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530772.596:13271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.596:13272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.607:13273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.608:13274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.609:13275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64351 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530772.626:13276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.626:13277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.637:13278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.637:13279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.638:13280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64366 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530772.695:13281): pid=64381 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530772.695:13282): pid=64381 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67626B676F63727773676E7176656A7178717465616E7568717A6975786E6C74203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303737322E303533343934372D36343231322D3134343838353338363935313438322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530772.696:13283): pid=64381 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530772.697:13284): pid=64381 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530772.899:13285): pid=64381 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530772.899:13286): pid=64381 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530772.902:13287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.902:13288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530772.913:13289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530772.913:13290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530772.915:13291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530772.935:13292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530772.935:13293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530773.202:13294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530773.202:13295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530773.203:13296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64414 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530773.220:13297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530773.220:13298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530773.229:13299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530773.229:13300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530773.230:13301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64428 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530773.252:13302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530773.252:13303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530773.267:13304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530773.267:13305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530773.268:13306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64449 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530773.298:13307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530773.298:13308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530773.309:13309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530773.309:13310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530773.310:13311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64463 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530773.329:13312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530773.329:13313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530773.339:13314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530773.339:13315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530773.340:13316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=64478 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530773.388:13317): pid=64493 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530773.389:13318): pid=64493 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530773.389:13319): pid=64493 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530773.391:13320): pid=64493 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530775.391:13321): prog-id=407 op=LOAD
type=SYSCALL msg=audit(1748530775.391:13321): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012dc48 a2=90 a3=0 items=0 ppid=64572 pid=64584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.391:13321): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643535313334356332333738323233366337666630303261
type=BPF msg=audit(1748530775.392:13322): prog-id=408 op=LOAD
type=SYSCALL msg=audit(1748530775.392:13322): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012d9d8 a2=90 a3=0 items=0 ppid=64572 pid=64584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.392:13322): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643535313334356332333738323233366337666630303261
type=BPF msg=audit(1748530775.392:13323): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.392:13324): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.392:13325): prog-id=409 op=LOAD
type=SYSCALL msg=audit(1748530775.392:13325): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012deb0 a2=90 a3=0 items=0 ppid=64572 pid=64584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.392:13325): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35643535313334356332333738323233366337666630303261
type=BPF msg=audit(1748530775.697:13326): prog-id=410 op=LOAD
type=BPF msg=audit(1748530775.698:13327): prog-id=411 op=LOAD
type=SYSCALL msg=audit(1748530775.698:13327): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=64711 pid=64742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.698:13327): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613065633965613536646637333730366231333434313235
type=BPF msg=audit(1748530775.699:13328): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.699:13329): prog-id=412 op=LOAD
type=SYSCALL msg=audit(1748530775.699:13329): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=64711 pid=64742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.699:13329): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613065633965613536646637333730366231333434313235
type=BPF msg=audit(1748530775.699:13330): prog-id=413 op=LOAD
type=SYSCALL msg=audit(1748530775.699:13330): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=64711 pid=64742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.699:13330): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613065633965613536646637333730366231333434313235
type=BPF msg=audit(1748530775.699:13331): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.700:13332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.700:13333): prog-id=414 op=LOAD
type=SYSCALL msg=audit(1748530775.700:13333): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=64711 pid=64742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.700:13333): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613065633965613536646637333730366231333434313235
type=BPF msg=audit(1748530775.720:13334): prog-id=415 op=LOAD
type=BPF msg=audit(1748530775.720:13335): prog-id=416 op=LOAD
type=SYSCALL msg=audit(1748530775.720:13335): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bad0 a2=90 a3=0 items=0 ppid=64762 pid=64795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.720:13335): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65376432346533366532326237316366343636636336353865
type=BPF msg=audit(1748530775.720:13336): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.721:13337): prog-id=417 op=LOAD
type=SYSCALL msg=audit(1748530775.721:13337): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bc48 a2=90 a3=0 items=0 ppid=64762 pid=64795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.721:13337): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65376432346533366532326237316366343636636336353865
type=BPF msg=audit(1748530775.721:13338): prog-id=418 op=LOAD
type=SYSCALL msg=audit(1748530775.721:13338): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011b9d8 a2=90 a3=0 items=0 ppid=64762 pid=64795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.721:13338): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65376432346533366532326237316366343636636336353865
type=BPF msg=audit(1748530775.721:13339): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.721:13340): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.721:13341): prog-id=419 op=LOAD
type=SYSCALL msg=audit(1748530775.721:13341): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011beb0 a2=90 a3=0 items=0 ppid=64762 pid=64795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.721:13341): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65376432346533366532326237316366343636636336353865
type=BPF msg=audit(1748530775.819:13342): prog-id=420 op=LOAD
type=BPF msg=audit(1748530775.822:13343): prog-id=421 op=LOAD
type=SYSCALL msg=audit(1748530775.822:13343): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=64818 pid=64898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.822:13343): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343562366431623566383233643633326232306538393032
type=BPF msg=audit(1748530775.822:13344): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.822:13345): prog-id=422 op=LOAD
type=SYSCALL msg=audit(1748530775.822:13345): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=64818 pid=64898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.822:13345): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343562366431623566383233643633326232306538393032
type=BPF msg=audit(1748530775.822:13346): prog-id=423 op=LOAD
type=BPF msg=audit(1748530775.824:13347): prog-id=424 op=LOAD
type=BPF msg=audit(1748530775.824:13348): prog-id=425 op=LOAD
type=SYSCALL msg=audit(1748530775.824:13348): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=64873 pid=64914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.824:13348): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39363430383666376634643262346632383865383833613932
type=BPF msg=audit(1748530775.824:13349): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.825:13350): prog-id=426 op=LOAD
type=SYSCALL msg=audit(1748530775.825:13350): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=64873 pid=64914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.825:13350): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39363430383666376634643262346632383865383833613932
type=BPF msg=audit(1748530775.825:13351): prog-id=427 op=LOAD
type=SYSCALL msg=audit(1748530775.822:13346): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=64818 pid=64898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.822:13346): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343562366431623566383233643633326232306538393032
type=BPF msg=audit(1748530775.825:13352): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.825:13353): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.825:13354): prog-id=428 op=LOAD
type=SYSCALL msg=audit(1748530775.825:13354): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=64818 pid=64898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.825:13354): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343562366431623566383233643633326232306538393032
type=SYSCALL msg=audit(1748530775.825:13351): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=64873 pid=64914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.825:13351): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39363430383666376634643262346632383865383833613932
type=BPF msg=audit(1748530775.825:13355): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.825:13356): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530775.826:13357): prog-id=429 op=LOAD
type=SYSCALL msg=audit(1748530775.826:13357): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=64873 pid=64914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530775.826:13357): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39363430383666376634643262346632383865383833613932
type=USER_END msg=audit(1748530776.023:13358): pid=64493 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530776.023:13359): pid=64493 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530776.027:13360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530776.027:13361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530776.039:13362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530776.039:13363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530776.040:13364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65250 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530776.071:13365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530776.071:13366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=BPF msg=audit(1748530776.282:13367): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1748530776.634:13368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530776.634:13369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530776.637:13370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65538 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530776.674:13371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530776.674:13372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530776.684:13373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530776.684:13374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530776.685:13375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65553 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530776.724:13376): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530776.724:13377): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530776.739:13378): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530776.739:13379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530776.740:13380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65574 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530776.784:13381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530776.784:13382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530776.794:13383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530776.794:13384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530776.795:13385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65588 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530776.815:13386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530776.815:13387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530776.828:13388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530776.828:13389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530776.831:13390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65603 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530776.918:13391): pid=65618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530776.918:13392): pid=65618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667669617777676A63777774736E66766D667964717A6563797279787A79736B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303737362E363736323530322D36353433372D3232393735323234353530333239302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530776.919:13393): pid=65618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530776.924:13394): pid=65618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530777.229:13395): pid=65618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530777.229:13396): pid=65618 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530777.231:13397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530777.231:13398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530777.244:13399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530777.244:13400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530777.245:13401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65638 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530777.273:13402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530777.273:13403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530777.519:13404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530777.520:13405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530777.522:13406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65658 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530777.548:13407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530777.548:13408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530777.557:13409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530777.557:13410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530777.560:13411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65678 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530777.591:13412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530777.592:13413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530777.608:13414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530777.608:13415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530777.610:13416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65702 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530777.653:13417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530777.653:13418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530777.663:13419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530777.663:13420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530777.667:13421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65716 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530777.689:13422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530777.689:13423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530777.699:13424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530777.699:13425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530777.701:13426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65731 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530777.754:13427): pid=65746 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530777.754:13428): pid=65746 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62636E6665656D76676E6D6972646E6D6C696C71646B76696965626D6D6E766E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303737372E353439383231362D36353433372D3139353337303737303834343531322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530777.754:13429): pid=65746 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530777.756:13430): pid=65746 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530778.064:13431): pid=65746 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530778.064:13432): pid=65746 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530778.067:13433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530778.067:13434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530778.078:13435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530778.078:13436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530778.079:13437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65765 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530778.105:13438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530778.105:13439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530778.347:13440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530778.347:13441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530778.348:13442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530778.376:13443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530778.376:13444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530778.386:13445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530778.386:13446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530778.388:13447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65794 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530778.419:13448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530778.419:13449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530778.434:13450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530778.434:13451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530778.436:13452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65815 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530778.483:13453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530778.483:13454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530778.495:13455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530778.495:13456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530778.497:13457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65829 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530778.518:13458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530778.518:13459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530778.528:13460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530778.528:13461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530778.529:13462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530778.600:13463): pid=65860 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530778.600:13464): pid=65860 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6963787666646E747A6D7676646D637A6E796A676875786876617961717A7479203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303737382E333738353631332D36353433372D3233393339353937373339373632332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530778.601:13465): pid=65860 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530778.603:13466): pid=65860 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530780.028:13467): pid=65860 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530780.031:13468): pid=65860 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530780.033:13469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530780.033:13470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530780.044:13471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530780.044:13472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530780.045:13473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65921 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530780.077:13474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530780.077:13475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530780.344:13476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530780.344:13477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530780.345:13478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65942 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530780.366:13479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530780.366:13480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530780.378:13481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530780.378:13482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530780.379:13483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530780.416:13484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530780.416:13485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530780.433:13486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530780.436:13487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530780.438:13488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65977 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530780.477:13489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530780.477:13490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530780.490:13491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530780.493:13492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530780.493:13493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=65991 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530780.516:13494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530780.516:13495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530780.530:13496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530780.530:13497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530780.532:13498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66007 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530780.591:13499): pid=66022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530780.591:13500): pid=66022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A7576746A7565666A6A7A75766A737A686E766A786B676C68697062686372203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303738302E3336373735312D36353433372D3138393337363837373730363436302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530780.592:13501): pid=66022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530780.593:13502): pid=66022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1748530783.657:13503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748530789.570:13504): pid=66022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530789.570:13505): pid=66022 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530789.572:13506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530789.572:13507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530789.583:13508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530789.583:13509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530789.583:13510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66164 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530789.603:13511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530789.603:13512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530789.822:13513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530789.822:13514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530789.823:13515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530789.840:13516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530789.840:13517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530789.850:13518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530789.850:13519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530789.851:13520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66193 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530789.872:13521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530789.872:13522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530789.886:13523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530789.886:13524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530789.887:13525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66214 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530789.918:13526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530789.918:13527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530789.928:13528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530789.928:13529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530789.929:13530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530789.948:13531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530789.948:13532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530789.958:13533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530789.958:13534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530789.959:13535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66243 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530790.011:13536): pid=66258 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530790.012:13537): pid=66258 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666F7872636779766769786D726E707A6462757A6D726E786E63716C6B686B6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303738392E383432313230362D36353433372D35333838373636323537363238322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530790.012:13538): pid=66258 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530790.014:13539): pid=66258 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530790.300:13540): pid=66258 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530790.301:13541): pid=66258 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530790.303:13542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530790.303:13543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530790.314:13544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530790.314:13545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530790.315:13546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66292 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530790.333:13547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530790.333:13548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530790.585:13549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530790.585:13550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530790.586:13551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530790.604:13552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530790.604:13553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530790.614:13554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530790.614:13555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530790.615:13556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66354 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530790.636:13557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530790.636:13558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530790.654:13559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530790.654:13560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530790.655:13561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66379 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530790.690:13562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530790.690:13563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530790.700:13564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530790.701:13565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530790.701:13566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530790.720:13567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530790.720:13568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530790.731:13569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530790.731:13570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530790.732:13571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66414 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530790.792:13572): pid=66441 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530790.793:13573): pid=66441 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B756774637671747A696E616669686D63777365627A797577666C7469696E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303739302E363036333937392D36363330362D33333039393733383235393731362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530790.793:13574): pid=66441 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530790.795:13575): pid=66441 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530790.963:13576): pid=66441 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530790.963:13577): pid=66441 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530790.965:13578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530790.965:13579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530790.976:13580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530790.976:13581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530790.977:13582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66453 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530790.996:13583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530790.996:13584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530791.551:13585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530791.551:13586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530791.552:13587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66539 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530791.575:13588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530791.575:13589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530791.581:13590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530791.581:13591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530791.582:13592): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530791.606:13593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530791.606:13594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530791.719:13595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530791.724:13596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530791.725:13597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66646 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530791.757:13598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530791.757:13599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530791.769:13600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530791.769:13601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530791.769:13602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530791.794:13603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530791.794:13604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530791.807:13605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530791.808:13606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530791.809:13607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66695 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530791.878:13608): pid=66710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530791.878:13609): pid=66710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66657066716D6761776C68746574737676757168676F6B766461646375707370203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303739312E353732363737312D36363437372D37363230363833303938373030352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530791.879:13610): pid=66710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530791.880:13611): pid=66710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530792.058:13612): pid=66710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530792.059:13613): pid=66710 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530792.066:13614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.066:13615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.080:13616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.082:13617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.083:13618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530792.114:13619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.114:13620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.125:13621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.125:13622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.128:13623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66753 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530792.158:13624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.158:13625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.172:13626): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.172:13627): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.176:13628): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66769 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530792.230:13629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.230:13630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.241:13631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.241:13632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.242:13633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66784 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530792.262:13634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.262:13635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.275:13636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.275:13637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.277:13638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66801 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530792.346:13639): pid=66816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530792.346:13640): pid=66816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71627776786666716365677464706777756A716C706264796C6D7A66656B6579203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303739312E353732363737312D36363437372D37363230363833303938373030352F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530792.346:13641): pid=66816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530792.351:13642): pid=66816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530792.520:13643): pid=66816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530792.521:13644): pid=66816 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530792.524:13645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.524:13646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.534:13647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.534:13648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.539:13649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66838 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530792.573:13650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.573:13651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.816:13652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.816:13653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.817:13654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530792.849:13655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.849:13656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.862:13657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.862:13658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.863:13659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66939 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530792.890:13660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.890:13661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.908:13662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.908:13663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.908:13664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66965 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530792.949:13665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.953:13666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530792.966:13667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530792.966:13668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530792.968:13669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530792.998:13670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530792.998:13671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530793.008:13672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530793.008:13673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530793.010:13674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=66994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530793.081:13675): pid=67012 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530793.081:13676): pid=67012 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D6D6875626566616A6D6C626B73766D6F717661766D61746269676764737A203B2068747470735F70726F78793D272720687474705F70726F78793D272720444F434B45525F434C49454E545F54494D454F55543D31323020434F4D504F53455F485454505F54494D454F55543D313230202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303739322E3835303733362D36363835372D33343731343334363539303433362F416E736962616C6C5A5F646F636B65725F636F6D706F73652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530793.082:13677): pid=67012 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530793.084:13678): pid=67012 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530794.404:13679): prog-id=430 op=LOAD
type=BPF msg=audit(1748530794.405:13680): prog-id=431 op=LOAD
type=SYSCALL msg=audit(1748530794.405:13680): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000119ad0 a2=90 a3=0 items=0 ppid=67184 pid=67205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.405:13680): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353537646232653262643532636530633532313066366164
type=BPF msg=audit(1748530794.406:13681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.406:13682): prog-id=432 op=LOAD
type=SYSCALL msg=audit(1748530794.406:13682): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000119c48 a2=90 a3=0 items=0 ppid=67184 pid=67205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.406:13682): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353537646232653262643532636530633532313066366164
type=BPF msg=audit(1748530794.406:13683): prog-id=433 op=LOAD
type=SYSCALL msg=audit(1748530794.406:13683): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001199d8 a2=90 a3=0 items=0 ppid=67184 pid=67205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.406:13683): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353537646232653262643532636530633532313066366164
type=BPF msg=audit(1748530794.406:13684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.406:13685): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.406:13686): prog-id=434 op=LOAD
type=SYSCALL msg=audit(1748530794.406:13686): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000119eb0 a2=90 a3=0 items=0 ppid=67184 pid=67205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.406:13686): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353537646232653262643532636530633532313066366164
type=BPF msg=audit(1748530794.417:13687): prog-id=435 op=LOAD
type=SYSCALL msg=audit(1748530794.417:13687): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012bc48 a2=90 a3=0 items=0 ppid=67166 pid=67187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.417:13687): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39366166303232336565376335386531343133346232376263
type=BPF msg=audit(1748530794.417:13688): prog-id=436 op=LOAD
type=SYSCALL msg=audit(1748530794.417:13688): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012b9d8 a2=90 a3=0 items=0 ppid=67166 pid=67187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.417:13688): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39366166303232336565376335386531343133346232376263
type=BPF msg=audit(1748530794.417:13689): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.418:13690): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.418:13691): prog-id=437 op=LOAD
type=SYSCALL msg=audit(1748530794.418:13691): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012beb0 a2=90 a3=0 items=0 ppid=67166 pid=67187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.418:13691): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39366166303232336565376335386531343133346232376263
type=BPF msg=audit(1748530794.634:13692): prog-id=438 op=LOAD
type=BPF msg=audit(1748530794.635:13693): prog-id=439 op=LOAD
type=SYSCALL msg=audit(1748530794.635:13693): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125ad0 a2=90 a3=0 items=0 ppid=67391 pid=67412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.635:13693): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61663666363834666437373663623631323639323935363537
type=BPF msg=audit(1748530794.635:13694): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.635:13695): prog-id=440 op=LOAD
type=SYSCALL msg=audit(1748530794.635:13695): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125c48 a2=90 a3=0 items=0 ppid=67391 pid=67412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.635:13695): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61663666363834666437373663623631323639323935363537
type=BPF msg=audit(1748530794.635:13696): prog-id=441 op=LOAD
type=SYSCALL msg=audit(1748530794.635:13696): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001259d8 a2=90 a3=0 items=0 ppid=67391 pid=67412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.635:13696): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61663666363834666437373663623631323639323935363537
type=BPF msg=audit(1748530794.635:13697): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.635:13698): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.635:13699): prog-id=442 op=LOAD
type=SYSCALL msg=audit(1748530794.635:13699): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125eb0 a2=90 a3=0 items=0 ppid=67391 pid=67412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.635:13699): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61663666363834666437373663623631323639323935363537
type=BPF msg=audit(1748530794.698:13700): prog-id=443 op=LOAD
type=BPF msg=audit(1748530794.704:13701): prog-id=444 op=LOAD
type=SYSCALL msg=audit(1748530794.704:13701): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125ad0 a2=90 a3=0 items=0 ppid=67490 pid=67502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.704:13701): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35656234383265626135666662343862343361326465356133
type=BPF msg=audit(1748530794.705:13702): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.705:13703): prog-id=445 op=LOAD
type=SYSCALL msg=audit(1748530794.705:13703): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125c48 a2=90 a3=0 items=0 ppid=67490 pid=67502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.705:13703): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35656234383265626135666662343862343361326465356133
type=BPF msg=audit(1748530794.706:13704): prog-id=446 op=LOAD
type=SYSCALL msg=audit(1748530794.706:13704): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001259d8 a2=90 a3=0 items=0 ppid=67490 pid=67502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.706:13704): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35656234383265626135666662343862343361326465356133
type=BPF msg=audit(1748530794.706:13705): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.706:13706): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.706:13707): prog-id=447 op=LOAD
type=SYSCALL msg=audit(1748530794.706:13707): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000125eb0 a2=90 a3=0 items=0 ppid=67490 pid=67502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.706:13707): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35656234383265626135666662343862343361326465356133
type=BPF msg=audit(1748530794.805:13708): prog-id=448 op=LOAD
type=BPF msg=audit(1748530794.809:13709): prog-id=449 op=LOAD
type=SYSCALL msg=audit(1748530794.809:13709): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=67516 pid=67578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.809:13709): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62636337636339316332306662623136613364336633633737
type=BPF msg=audit(1748530794.809:13710): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.809:13711): prog-id=450 op=LOAD
type=SYSCALL msg=audit(1748530794.809:13711): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=67516 pid=67578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.809:13711): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62636337636339316332306662623136613364336633633737
type=BPF msg=audit(1748530794.809:13712): prog-id=451 op=LOAD
type=SYSCALL msg=audit(1748530794.809:13712): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=67516 pid=67578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.809:13712): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62636337636339316332306662623136613364336633633737
type=BPF msg=audit(1748530794.809:13713): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.809:13714): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530794.809:13715): prog-id=452 op=LOAD
type=SYSCALL msg=audit(1748530794.809:13715): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=67516 pid=67578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530794.809:13715): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62636337636339316332306662623136613364336633633737
type=USER_END msg=audit(1748530794.980:13716): pid=67012 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530794.982:13717): pid=67012 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530794.984:13718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530794.984:13719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530794.996:13720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530794.996:13721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530794.997:13722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=67881 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530795.027:13723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530795.027:13724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=BPF msg=audit(1748530795.229:13725): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1748530795.631:13726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530795.631:13727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530795.633:13728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68298 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530795.661:13729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530795.661:13730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530795.670:13731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530795.672:13732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530795.673:13733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530795.705:13734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530795.705:13735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530795.726:13736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530795.726:13737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530795.727:13738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68367 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530795.771:13739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530795.771:13740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530795.782:13741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530795.782:13742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530795.783:13743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68405 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530795.809:13744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530795.809:13745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530795.819:13746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530795.819:13747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530795.820:13748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68438 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530795.899:13749): pid=68471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530795.899:13750): pid=68471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6969646D6B75717A7A76656B7163756F6B747173797274686169636D6E72756A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303739352E363632393735332D36383133322D3130363935383635333035323033302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530795.900:13751): pid=68471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530795.904:13752): pid=68471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530796.209:13753): pid=68471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530796.209:13754): pid=68471 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530796.212:13755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530796.212:13756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530796.224:13757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530796.224:13758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530796.225:13759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530796.261:13760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530796.261:13761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530796.517:13762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530796.517:13763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530796.519:13764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530796.549:13765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530796.549:13766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530796.559:13767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530796.559:13768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530796.560:13769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68580 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530796.588:13770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530796.588:13771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530796.603:13772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530796.603:13773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530796.604:13774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68601 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530796.644:13775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530796.644:13776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530796.652:13777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530796.652:13778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530796.652:13779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530796.669:13780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530796.669:13781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530796.680:13782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530796.680:13783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530796.681:13784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68630 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530796.731:13785): pid=68645 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530796.731:13786): pid=68645 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F746F656F76786378687666617A63647873747975636C657266666A627471203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303739362E353531353336332D36383133322D37363438343735323431313239372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530796.732:13787): pid=68645 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530796.733:13788): pid=68645 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530797.028:13789): pid=68645 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530797.028:13790): pid=68645 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530797.030:13791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530797.030:13792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530797.041:13793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530797.041:13794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530797.042:13795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530797.079:13796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530797.079:13797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530797.309:13798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530797.309:13799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530797.310:13800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68692 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530797.331:13801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530797.331:13802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530797.341:13803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530797.341:13804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530797.342:13805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68706 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530797.366:13806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530797.367:13807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530797.380:13808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530797.380:13809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530797.382:13810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68729 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530797.441:13811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530797.441:13812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530797.454:13813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530797.454:13814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530797.455:13815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68746 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530797.480:13816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530797.480:13817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530797.496:13818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530797.496:13819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530797.497:13820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68761 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530797.562:13821): pid=68776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530797.562:13822): pid=68776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C72796D667A717579687065787A6765786E626A6F6A716573727272676B636F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303739372E333333373430322D36383133322D3235393635313234343837393736312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530797.563:13823): pid=68776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530797.564:13824): pid=68776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530799.447:13825): pid=68776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530799.448:13826): pid=68776 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530799.464:13827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530799.464:13828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530799.474:13829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530799.474:13830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530799.475:13831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68826 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530799.493:13832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530799.493:13833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530799.719:13834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530799.719:13835): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530799.720:13836): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530799.737:13837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530799.737:13838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530799.746:13839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530799.746:13840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530799.747:13841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68863 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530799.774:13842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530799.774:13843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530799.789:13844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530799.789:13845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530799.790:13846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530799.825:13847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530799.825:13848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530799.837:13849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530799.837:13850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530799.839:13851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530799.868:13852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530799.868:13853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530799.878:13854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530799.878:13855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530799.880:13856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=68924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530799.948:13857): pid=68943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530799.948:13858): pid=68943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63717A6F756C6172736D716165757567796E66676677696E68707761636E7A6B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303739392E373338343632342D36383133322D35303530353531393331303238302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530799.948:13859): pid=68943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530799.951:13860): pid=68943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530800.478:13861): pid=68943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530800.478:13862): pid=68943 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530800.480:13863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530800.480:13864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530800.492:13865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530800.492:13866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530800.496:13867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69020 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530800.527:13868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530800.527:13869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530800.788:13870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530800.788:13871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530800.789:13872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69036 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530800.808:13873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530800.808:13874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530800.817:13875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530800.817:13876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530800.820:13877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530800.846:13878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530800.846:13879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530800.862:13880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530800.862:13881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530800.863:13882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69071 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530800.902:13883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530800.902:13884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530800.917:13885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530800.917:13886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530800.918:13887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69085 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530800.951:13888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530800.951:13889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530800.961:13890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530800.961:13891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530800.962:13892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69100 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530801.019:13893): pid=69115 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530801.019:13894): pid=69115 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717373656465666172666B70626A776866796C7A71767572636571646C797A6B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303830302E383130323138332D36383133322D3230303731303530343339313430372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530801.020:13895): pid=69115 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530801.021:13896): pid=69115 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530801.348:13897): pid=69115 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530801.348:13898): pid=69115 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530801.350:13899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530801.350:13900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530801.360:13901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530801.360:13902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530801.362:13903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69128 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530801.383:13904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530801.383:13905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530801.613:13906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530801.613:13907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530801.614:13908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69175 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530801.631:13909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530801.631:13910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530801.641:13911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530801.642:13912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530801.644:13913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69189 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530801.680:13914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530801.680:13915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530801.697:13916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530801.697:13917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530801.702:13918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69210 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530801.743:13919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530801.744:13920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530801.754:13921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530801.754:13922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530801.758:13923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69224 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530801.786:13924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530801.786:13925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530801.797:13926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530801.797:13927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530801.798:13928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69239 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530801.866:13929): pid=69255 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530801.866:13930): pid=69255 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B706A677567737A6C726B6B6D6C74626972676B717775717A6D65636C6A626A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303830312E3633343337372D36393134322D38303638383338313331343534392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530801.866:13931): pid=69255 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530801.871:13932): pid=69255 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530802.034:13933): pid=69255 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530802.034:13934): pid=69255 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530802.039:13935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.039:13936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530802.050:13937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530802.050:13938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530802.051:13939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69259 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530802.082:13940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.082:13941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530802.315:13942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530802.315:13943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530802.316:13944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530802.341:13945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.341:13946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530802.353:13947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530802.353:13948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530802.355:13949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69290 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530802.392:13950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.392:13951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530802.523:13952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530802.523:13953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530802.525:13954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69311 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530802.563:13955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.563:13956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530802.576:13957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530802.576:13958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530802.576:13959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530802.599:13960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.600:13961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530802.611:13962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530802.611:13963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530802.612:13964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69340 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530802.672:13965): pid=69355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530802.672:13966): pid=69355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797A7767646D626B66787A6D76667071756D7762616A72796E70676C6C766C79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303830322E333432333138332D36393237342D3139323232353232353633303037362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530802.673:13967): pid=69355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530802.675:13968): pid=69355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530802.852:13969): pid=69355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530802.852:13970): pid=69355 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530802.857:13971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.857:13972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530802.873:13973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530802.873:13974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530802.875:13975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69360 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530802.896:13976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.897:13977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530802.909:13978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530802.909:13979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530802.910:13980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530802.937:13981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.937:13982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530802.954:13983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530802.954:13984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530802.955:13985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69390 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530802.997:13986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530802.997:13987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530803.015:13988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530803.015:13989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530803.021:13990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69404 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530803.052:13991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530803.052:13992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530803.062:13993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530803.062:13994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530803.064:13995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530803.141:13996): pid=69434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530803.141:13997): pid=69434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73736C6D686765686972776779626F64736C6A746C7A76716164737669647168203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303830322E333432333138332D36393237342D3139323232353232353633303037362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530803.142:13998): pid=69434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530803.146:13999): pid=69434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530803.336:14000): pid=69434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530803.337:14001): pid=69434 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530803.339:14002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530803.339:14003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530803.350:14004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530803.350:14005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530803.351:14006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69438 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530803.370:14007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530803.370:14008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530803.647:14009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530803.647:14010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530803.648:14011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530803.666:14012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530803.666:14013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530803.676:14014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530803.676:14015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530803.679:14016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69470 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530803.731:14017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530803.731:14018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530803.750:14019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530803.750:14020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530803.754:14021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69491 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530803.802:14022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530803.802:14023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530803.813:14024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530803.813:14025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530803.814:14026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69507 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530803.835:14027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530803.835:14028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530803.844:14029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530803.847:14030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530803.848:14031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=69522 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530803.923:14032): pid=69537 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530803.923:14033): pid=69537 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530803.924:14034): pid=69537 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530803.926:14035): pid=69537 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530804.821:14036): prog-id=453 op=LOAD
type=SYSCALL msg=audit(1748530804.821:14036): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=69572 pid=69584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530804.821:14036): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63613661303638613965336366313762353862333639303866
type=BPF msg=audit(1748530804.821:14037): prog-id=454 op=LOAD
type=SYSCALL msg=audit(1748530804.821:14037): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=69572 pid=69584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530804.821:14037): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63613661303638613965336366313762353862333639303866
type=BPF msg=audit(1748530804.821:14038): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530804.821:14039): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530804.821:14040): prog-id=455 op=LOAD
type=SYSCALL msg=audit(1748530804.821:14040): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=69572 pid=69584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530804.821:14040): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63613661303638613965336366313762353862333639303866
type=BPF msg=audit(1748530805.146:14041): prog-id=456 op=LOAD
type=BPF msg=audit(1748530805.147:14042): prog-id=457 op=LOAD
type=SYSCALL msg=audit(1748530805.147:14042): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=69799 pid=69820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.147:14042): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65393262383165353437623463316563386461343738383633
type=BPF msg=audit(1748530805.147:14043): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.147:14044): prog-id=458 op=LOAD
type=SYSCALL msg=audit(1748530805.147:14044): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=69799 pid=69820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.147:14044): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65393262383165353437623463316563386461343738383633
type=BPF msg=audit(1748530805.147:14045): prog-id=459 op=LOAD
type=SYSCALL msg=audit(1748530805.147:14045): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=69799 pid=69820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.147:14045): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65393262383165353437623463316563386461343738383633
type=BPF msg=audit(1748530805.147:14046): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.147:14047): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.147:14048): prog-id=460 op=LOAD
type=SYSCALL msg=audit(1748530805.147:14048): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=69799 pid=69820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.147:14048): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65393262383165353437623463316563386461343738383633
type=BPF msg=audit(1748530805.236:14049): prog-id=461 op=LOAD
type=BPF msg=audit(1748530805.236:14050): prog-id=462 op=LOAD
type=SYSCALL msg=audit(1748530805.236:14050): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000149ad0 a2=90 a3=0 items=0 ppid=69878 pid=69912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.236:14050): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643633636339353765626437623434353163623333366239
type=BPF msg=audit(1748530805.236:14051): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.237:14052): prog-id=463 op=LOAD
type=SYSCALL msg=audit(1748530805.237:14052): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000149c48 a2=90 a3=0 items=0 ppid=69878 pid=69912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.237:14052): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643633636339353765626437623434353163623333366239
type=BPF msg=audit(1748530805.237:14053): prog-id=464 op=LOAD
type=SYSCALL msg=audit(1748530805.237:14053): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001499d8 a2=90 a3=0 items=0 ppid=69878 pid=69912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.237:14053): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643633636339353765626437623434353163623333366239
type=BPF msg=audit(1748530805.237:14054): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.237:14055): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.237:14056): prog-id=465 op=LOAD
type=SYSCALL msg=audit(1748530805.237:14056): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000149eb0 a2=90 a3=0 items=0 ppid=69878 pid=69912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.237:14056): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63643633636339353765626437623434353163623333366239
type=BPF msg=audit(1748530805.334:14057): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.347:14058): prog-id=466 op=LOAD
type=BPF msg=audit(1748530805.349:14059): prog-id=467 op=LOAD
type=BPF msg=audit(1748530805.349:14060): prog-id=468 op=LOAD
type=BPF msg=audit(1748530805.350:14061): prog-id=469 op=LOAD
type=SYSCALL msg=audit(1748530805.350:14061): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c3ad0 a2=90 a3=0 items=0 ppid=69971 pid=70025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.350:14061): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373262633264303038326365646336356266663033323062
type=BPF msg=audit(1748530805.350:14062): prog-id=0 op=UNLOAD
type=SYSCALL msg=audit(1748530805.349:14060): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dad0 a2=90 a3=0 items=0 ppid=69952 pid=69995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.349:14060): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65386339323534313837613861313266613561633833336634
type=BPF msg=audit(1748530805.351:14063): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.351:14064): prog-id=470 op=LOAD
type=BPF msg=audit(1748530805.351:14065): prog-id=471 op=LOAD
type=SYSCALL msg=audit(1748530805.351:14064): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c3c48 a2=90 a3=0 items=0 ppid=69971 pid=70025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=SYSCALL msg=audit(1748530805.351:14065): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011dc48 a2=90 a3=0 items=0 ppid=69952 pid=69995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.351:14065): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65386339323534313837613861313266613561633833336634
type=PROCTITLE msg=audit(1748530805.351:14064): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373262633264303038326365646336356266663033323062
type=BPF msg=audit(1748530805.353:14066): prog-id=472 op=LOAD
type=BPF msg=audit(1748530805.353:14067): prog-id=473 op=LOAD
type=SYSCALL msg=audit(1748530805.353:14067): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0001c39d8 a2=90 a3=0 items=0 ppid=69971 pid=70025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.353:14067): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373262633264303038326365646336356266663033323062
type=BPF msg=audit(1748530805.353:14068): prog-id=0 op=UNLOAD
type=SYSCALL msg=audit(1748530805.353:14066): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011d9d8 a2=90 a3=0 items=0 ppid=69952 pid=69995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=BPF msg=audit(1748530805.353:14069): prog-id=0 op=UNLOAD
type=PROCTITLE msg=audit(1748530805.353:14066): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65386339323534313837613861313266613561633833336634
type=BPF msg=audit(1748530805.354:14070): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.354:14071): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530805.354:14072): prog-id=474 op=LOAD
type=SYSCALL msg=audit(1748530805.354:14072): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c3eb0 a2=90 a3=0 items=0 ppid=69971 pid=70025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.354:14072): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37373262633264303038326365646336356266663033323062
type=BPF msg=audit(1748530805.355:14073): prog-id=475 op=LOAD
type=SYSCALL msg=audit(1748530805.355:14073): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011deb0 a2=90 a3=0 items=0 ppid=69952 pid=69995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530805.355:14073): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65386339323534313837613861313266613561633833336634
type=USER_END msg=audit(1748530805.576:14074): pid=69537 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530805.578:14075): pid=69537 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530805.583:14076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530805.583:14077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530805.596:14078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530805.596:14079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530805.597:14080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70407 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530805.626:14081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530805.626:14082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530806.250:14083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530806.250:14084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530806.252:14085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530806.292:14086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530806.292:14087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530806.304:14088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530806.308:14089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530806.309:14090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530806.349:14091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530806.349:14092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530806.365:14093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530806.368:14094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530806.370:14095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530806.414:14096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530806.414:14097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530806.424:14098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530806.424:14099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530806.425:14100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70517 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530806.454:14101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530806.454:14102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530806.466:14103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530806.466:14104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530806.467:14105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70532 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530806.558:14106): pid=70547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530806.558:14107): pid=70547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E616C736C776262656E75706678787069656B61707273756A716F6E637A64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303830362E3239353431362D37303436332D36393935363534333337323538322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530806.558:14108): pid=70547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530806.563:14109): pid=70547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530808.176:14110): pid=70547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530808.177:14111): pid=70547 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530808.181:14112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530808.181:14113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530808.200:14114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530808.200:14115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530808.201:14116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530808.241:14117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530808.241:14118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530808.556:14119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530808.556:14120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530808.556:14121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530808.574:14122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530808.575:14123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530808.584:14124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530808.584:14125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530808.585:14126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70623 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530808.609:14127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530808.609:14128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530808.625:14129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530808.625:14130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530808.627:14131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530808.658:14132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530808.658:14133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530808.669:14134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530808.669:14135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530808.670:14136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70658 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530808.689:14137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530808.689:14138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530808.700:14139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530808.700:14140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530808.701:14141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70673 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530808.765:14142): pid=70688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530808.765:14143): pid=70688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646E6F6468706D6B6575736970766A61766678726C6371726466647A6B66626C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303830382E353736373033382D37303630372D3235383434373238383334303931372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530808.766:14144): pid=70688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530808.769:14145): pid=70688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530808.936:14146): pid=70688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530808.936:14147): pid=70688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530808.938:14148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530808.938:14149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530808.948:14150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530808.948:14151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530808.949:14152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70692 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530808.968:14153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530808.968:14154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.179:14155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.179:14156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.180:14157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530809.200:14158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.200:14159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.208:14160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.208:14161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.210:14162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70723 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530809.231:14163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.231:14164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.246:14165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.247:14166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.247:14167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70744 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530809.280:14168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.280:14169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.291:14170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.291:14171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.292:14172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70758 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530809.311:14173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.311:14174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.323:14175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.323:14176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.324:14177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70773 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530809.379:14178): pid=70788 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530809.379:14179): pid=70788 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70796B786D65616766746B77716B756A6F656A6E6E626177727565746E757562203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303830392E323031333331362D37303730372D3139343537363530373233353733382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530809.380:14180): pid=70788 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530809.381:14181): pid=70788 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530809.538:14182): pid=70788 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530809.538:14183): pid=70788 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530809.541:14184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.541:14185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.551:14186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.551:14187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.552:14188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70792 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530809.573:14189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.573:14190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.847:14191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.847:14192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.848:14193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530809.867:14194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.867:14195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.877:14196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.877:14197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.878:14198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70825 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530809.900:14199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.901:14200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.915:14201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.915:14202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.916:14203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530809.945:14204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.945:14205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.958:14206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.959:14207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.960:14208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530809.981:14209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530809.981:14210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530809.991:14211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530809.991:14212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530809.992:14213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70875 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530810.049:14214): pid=70890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530810.049:14215): pid=70890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6476726D6467677362777075726777746275676B7A6E776368666A636D727177203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303830392E3836393436322D37303830392D38333939373139343637363038352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530810.050:14216): pid=70890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530810.051:14217): pid=70890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530810.215:14218): pid=70890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530810.215:14219): pid=70890 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530810.223:14220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530810.223:14221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530810.233:14222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530810.233:14223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530810.234:14224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70894 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530810.255:14225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530810.255:14226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530810.562:14227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530810.562:14228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530810.564:14229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70950 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530810.581:14230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530810.581:14231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530810.590:14232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530810.590:14233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530810.591:14234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70974 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530810.613:14235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530810.613:14236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530810.629:14237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530810.629:14238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530810.630:14239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=70995 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530810.665:14240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530810.665:14241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530810.681:14242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530810.681:14243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530810.682:14244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71023 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530810.720:14245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530810.720:14246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530810.730:14247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530810.730:14248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530810.733:14249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71038 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530810.804:14250): pid=71053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530810.805:14251): pid=71053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617874747A726979776C777876707A677A676776686E66776367786B79777066203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831302E3538333134332D37303930392D3132383339353630333633333637322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530810.806:14252): pid=71053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530810.808:14253): pid=71053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530810.989:14254): pid=71053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530810.990:14255): pid=71053 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530810.994:14256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530810.994:14257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.010:14258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.010:14259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.012:14260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71094 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530811.033:14261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.033:14262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.222:14263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.222:14264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.223:14265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71111 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530811.242:14266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.242:14267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.250:14268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.250:14269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.251:14270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71127 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530811.273:14271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.273:14272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.288:14273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.288:14274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.289:14275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71148 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530811.320:14276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.320:14277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.331:14278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.331:14279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.332:14280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71162 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530811.354:14281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.354:14282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.365:14283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.365:14284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.366:14285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71177 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530811.423:14286): pid=71192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530811.423:14287): pid=71192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65627479676666676C636A6C7865696273647772686A73687270776C65617073203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831312E3234323938312D37303930392D3138373334373437373330353530322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530811.423:14288): pid=71192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530811.425:14289): pid=71192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530811.594:14290): pid=71192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530811.594:14291): pid=71192 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530811.597:14292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.597:14293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.607:14294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.607:14295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.608:14296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71197 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530811.630:14297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.630:14298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.822:14299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.822:14300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.823:14301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71212 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530811.840:14302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.840:14303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.850:14304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.850:14305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.852:14306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71226 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530811.902:14307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.902:14308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.916:14309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.919:14310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.920:14311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71247 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530811.962:14312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530811.962:14313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530811.975:14314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530811.975:14315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530811.978:14316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71261 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530812.013:14317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530812.013:14318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530812.023:14319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530812.023:14320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530812.025:14321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530812.094:14322): pid=71291 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530812.094:14323): pid=71291 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C636D6D666568777474736C6E65646E76687976666178646F6F7A636D7267203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831312E383431393333372D37303930392D3233343033313637343130353833342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530812.095:14324): pid=71291 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530812.096:14325): pid=71291 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530812.269:14326): pid=71291 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530812.270:14327): pid=71291 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530812.273:14328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530812.273:14329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530812.283:14330): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530812.283:14331): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530812.284:14332): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71295 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530812.303:14333): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530812.303:14334): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530812.477:14335): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530812.477:14336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530812.479:14337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71310 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530812.496:14338): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530812.496:14339): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530812.505:14340): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530812.505:14341): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530812.506:14342): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71324 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530812.544:14343): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530812.544:14344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530812.557:14345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530812.557:14346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530812.558:14347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71345 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530812.586:14348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530812.586:14349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530812.597:14350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530812.597:14351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530812.598:14352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530812.631:14353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530812.631:14354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530812.645:14355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530812.645:14356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530812.648:14357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530812.737:14358): pid=71389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530812.737:14359): pid=71389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D707969636F74657A78796775766C7668717063706475696E746D73736E6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831322E3439373931352D37303930392D3237383838343536383336393035362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530812.738:14360): pid=71389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530812.739:14361): pid=71389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530812.940:14362): pid=71389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530812.941:14363): pid=71389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530812.944:14364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530812.945:14365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530812.956:14366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530812.956:14367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530812.957:14368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530812.975:14369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530812.975:14370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.197:14371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.197:14372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.198:14373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71408 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530813.216:14374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.216:14375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.225:14376): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.225:14377): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.226:14378): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71422 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530813.251:14379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.251:14380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.265:14381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.265:14382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.266:14383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71443 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530813.294:14384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.294:14385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.305:14386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.305:14387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.306:14388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71457 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530813.325:14389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.325:14390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.335:14391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.335:14392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.336:14393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530813.391:14394): pid=71487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530813.392:14395): pid=71487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D616E686F6365746272627A757566716771666C627A7575696D6D78636A7867203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831332E323137303935362D37303930392D3232373636393135343138303036392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530813.392:14396): pid=71487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530813.393:14397): pid=71487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530813.578:14398): pid=71487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530813.579:14399): pid=71487 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530813.581:14400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.581:14401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.593:14402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.593:14403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.594:14404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71493 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530813.614:14405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.614:14406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.816:14407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.816:14408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.817:14409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71508 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530813.838:14410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.838:14411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.854:14412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.854:14413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.855:14414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71524 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530813.878:14415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.878:14416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.893:14417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.893:14418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.894:14419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71545 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530813.933:14420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.933:14421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.947:14422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.947:14423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.948:14424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71559 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530813.976:14425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530813.976:14426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530813.990:14427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530813.990:14428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530813.992:14429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530814.067:14430): pid=71590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530814.067:14431): pid=71590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6265756D6B666E6A6F62697A78776B786C6779737A6568797A70687876636D67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831332E383339393336372D37303930392D3136333432373738373833323735392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530814.068:14432): pid=71590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530814.070:14433): pid=71590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530814.249:14434): pid=71590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530814.249:14435): pid=71590 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530814.253:14436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530814.253:14437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530814.264:14438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530814.264:14439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530814.265:14440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71594 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530814.287:14441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530814.287:14442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530814.514:14443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530814.514:14444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530814.515:14445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71613 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530814.533:14446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530814.534:14447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530814.545:14448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530814.545:14449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530814.546:14450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71627 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530814.583:14451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530814.583:14452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530814.598:14453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530814.598:14454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530814.599:14455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71648 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530814.635:14456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530814.635:14457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530814.648:14458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530814.648:14459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530814.650:14460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71662 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530814.674:14461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530814.674:14462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530814.682:14463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530814.682:14464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530814.683:14465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71677 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530814.750:14466): pid=71692 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530814.750:14467): pid=71692 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746575696F63646D7476797165757068686C6D797671656869726C66746E7365203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831342E353335373436382D37303930392D31363732393739303032353935392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530814.750:14468): pid=71692 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530814.752:14469): pid=71692 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530814.917:14470): pid=71692 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530814.918:14471): pid=71692 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530814.924:14472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530814.924:14473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530814.935:14474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530814.935:14475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530814.936:14476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530814.979:14477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530814.979:14478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.182:14479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.182:14480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.183:14481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71711 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530815.210:14482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.210:14483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.219:14484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.219:14485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.220:14486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71728 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530815.243:14487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.243:14488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.258:14489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.258:14490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.259:14491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71749 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530815.289:14492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.289:14493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.300:14494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.300:14495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.301:14496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530815.324:14497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.324:14498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.334:14499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.334:14500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.336:14501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530815.389:14502): pid=71793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530815.389:14503): pid=71793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7861777972786F6D62666A6D6C6B6862787A617779646479766A616C666E6562203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831352E323131333735352D37303930392D32303337353831333435373539322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530815.390:14504): pid=71793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530815.391:14505): pid=71793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530815.545:14506): pid=71793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530815.545:14507): pid=71793 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530815.547:14508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.548:14509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.558:14510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.558:14511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.559:14512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71798 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530815.577:14513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.577:14514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.758:14515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.758:14516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.759:14517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71813 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530815.778:14518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.778:14519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.790:14520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.791:14521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.791:14522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530815.814:14523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.814:14524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.831:14525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.832:14526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.832:14527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71848 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530815.872:14528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.872:14529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.882:14530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.882:14531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.886:14532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71862 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530815.906:14533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530815.906:14534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530815.917:14535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530815.917:14536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530815.918:14537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71877 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530815.972:14538): pid=71892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530815.972:14539): pid=71892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626E6D6F776B696676717A656D6C646E71746762637976676B716E776E6C686F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831352E3738303531322D37303930392D3135363138333038313335303433362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530815.973:14540): pid=71892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530815.978:14541): pid=71892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530816.142:14542): pid=71892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530816.142:14543): pid=71892 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530816.145:14544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530816.145:14545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530816.157:14546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530816.157:14547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530816.158:14548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71900 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530816.176:14549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530816.176:14550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530816.369:14551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530816.369:14552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530816.370:14553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71915 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530816.388:14554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530816.389:14555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530816.398:14556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530816.398:14557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530816.399:14558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71929 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530816.421:14559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530816.421:14560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530816.435:14561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530816.435:14562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530816.436:14563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71950 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530816.468:14564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530816.468:14565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530816.478:14566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530816.478:14567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530816.479:14568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71964 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530816.497:14569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530816.497:14570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530816.507:14571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530816.507:14572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530816.508:14573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530816.565:14574): pid=71994 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530816.565:14575): pid=71994 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61656A6F6E627A62716E656779786D77617564766D646E727076716872677374203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831362E333930373235392D37303930392D3130383531313834383735303636352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530816.565:14576): pid=71994 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530816.566:14577): pid=71994 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530816.738:14578): pid=71994 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530816.738:14579): pid=71994 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530816.740:14580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530816.740:14581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530816.751:14582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530816.751:14583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530816.752:14584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=71998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530816.772:14585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530816.772:14586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530816.993:14587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530816.993:14588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530816.994:14589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72013 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.013:14590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.014:14591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.024:14592): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.024:14593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.026:14594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.081:14595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.081:14596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.096:14597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.096:14598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.097:14599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.125:14600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.125:14601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.136:14602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.136:14603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.137:14604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72062 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.155:14605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.155:14606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.166:14607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.166:14608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.167:14609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72077 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530817.218:14610): pid=72092 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530817.218:14611): pid=72092 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666964697369676969736A74687A73797263736B64656563676C786D6B796664203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831372E303135353134312D37303930392D36373732323836373736363131302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530817.219:14612): pid=72092 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530817.220:14613): pid=72092 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530817.391:14614): pid=72092 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530817.391:14615): pid=72092 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530817.393:14616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.393:14617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.403:14618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.403:14619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.404:14620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72096 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.424:14621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.424:14622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.602:14623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.602:14624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.603:14625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72111 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.622:14626): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.622:14627): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.631:14628): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.632:14629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.632:14630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72125 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.656:14631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.656:14632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.670:14633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.670:14634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.671:14635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72146 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.701:14636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.701:14637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.712:14638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.712:14639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.715:14640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72160 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.736:14641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.736:14642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.746:14643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.746:14644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.747:14645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72175 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530817.799:14646): pid=72190 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530817.799:14647): pid=72190 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767866757762766275716F6D6178626F686C7A74797077796F78706862727A6D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831372E363234363938342D37303930392D323536383536303137383538362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530817.799:14648): pid=72190 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530817.801:14649): pid=72190 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530817.956:14650): pid=72190 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530817.957:14651): pid=72190 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530817.959:14652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.959:14653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530817.969:14654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530817.969:14655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530817.970:14656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530817.989:14657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530817.989:14658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.176:14659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.177:14660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.178:14661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72209 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530818.198:14662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.198:14663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.210:14664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.210:14665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.211:14666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530818.234:14667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.234:14668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.249:14669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.249:14670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.250:14671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72244 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530818.280:14672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.280:14673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.298:14674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.298:14675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.300:14676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72258 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530818.320:14677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.320:14678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.330:14679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.330:14680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.331:14681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530818.386:14682): pid=72288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530818.386:14683): pid=72288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A69747276776E61787A6F616465636E67736B6A70646B7A64797179686D7170203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831382E323030353035332D37303930392D3137383931383130373833383238382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530818.387:14684): pid=72288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530818.388:14685): pid=72288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530818.542:14686): pid=72288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530818.542:14687): pid=72288 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530818.544:14688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.545:14689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.555:14690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.555:14691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.556:14692): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72292 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530818.575:14693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.575:14694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.768:14695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.768:14696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.769:14697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530818.786:14698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.787:14699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.796:14700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.797:14701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.798:14702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72321 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530818.819:14703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.819:14704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.833:14705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.833:14706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.834:14707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72342 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530818.868:14708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.868:14709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.879:14710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.879:14711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.879:14712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72356 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530818.898:14713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530818.898:14714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530818.907:14715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530818.907:14716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530818.908:14717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72371 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530818.959:14718): pid=72386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530818.960:14719): pid=72386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63617263716B69656968786D786B76767A6A696A7A7462726969666B7766726E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831382E3738383637362D37303930392D35393233323631303537343831302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530818.960:14720): pid=72386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530818.961:14721): pid=72386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530819.118:14722): pid=72386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530819.118:14723): pid=72386 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530819.120:14724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.120:14725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.130:14726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.130:14727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.131:14728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72390 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530819.150:14729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.151:14730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.332:14731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.332:14732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.333:14733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72405 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530819.350:14734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.350:14735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.361:14736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.361:14737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.362:14738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530819.383:14739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.383:14740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.397:14741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.398:14742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.398:14743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72440 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530819.428:14744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.428:14745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.438:14746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.439:14747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.439:14748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72454 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530819.458:14749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.459:14750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.468:14751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.469:14752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.470:14753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530819.524:14754): pid=72484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530819.524:14755): pid=72484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6277766C6A6E78726C75776A6B786276717372777566746A6E71676279716174203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831392E333532313231342D37303930392D37323030393637343033373630312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530819.525:14756): pid=72484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530819.526:14757): pid=72484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530819.679:14758): pid=72484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530819.680:14759): pid=72484 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530819.683:14760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.683:14761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.692:14762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.692:14763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.693:14764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72488 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530819.712:14765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.712:14766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.918:14767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.918:14768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.919:14769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72503 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530819.938:14770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.938:14771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.948:14772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.948:14773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.949:14774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72517 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530819.973:14775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530819.973:14776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530819.988:14777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530819.988:14778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530819.989:14779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72538 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530820.020:14780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.020:14781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530820.031:14782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530820.031:14783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530820.032:14784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72552 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530820.052:14785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.052:14786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530820.062:14787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530820.062:14788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530820.063:14789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72567 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530820.118:14790): pid=72582 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530820.118:14791): pid=72582 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E627575716C7772796E78666E756173737877766D776E617A68656F726E7670203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303831392E393339393332382D37303930392D3237383930373834313532323639352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530820.119:14792): pid=72582 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530820.121:14793): pid=72582 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530820.284:14794): pid=72582 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530820.285:14795): pid=72582 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530820.287:14796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.288:14797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530820.297:14798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530820.297:14799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530820.298:14800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530820.324:14801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.324:14802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530820.537:14803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530820.537:14804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530820.537:14805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72601 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530820.554:14806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.555:14807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530820.564:14808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530820.564:14809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530820.565:14810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530820.587:14811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.587:14812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530820.602:14813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530820.602:14814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530820.603:14815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72636 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530820.637:14816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.637:14817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530820.649:14818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530820.649:14819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530820.650:14820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72650 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530820.669:14821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.669:14822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530820.680:14823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530820.680:14824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530820.681:14825): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72665 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530820.735:14826): pid=72680 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530820.735:14827): pid=72680 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6763746B6C716D746D767868766167766A7873627775777061636B75687A746B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832302E3535363636322D37303930392D3130393839313338313031303930392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530820.735:14828): pid=72680 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530820.737:14829): pid=72680 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530820.904:14830): pid=72680 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530820.904:14831): pid=72680 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530820.906:14832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.907:14833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530820.917:14834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530820.917:14835): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530820.918:14836): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72684 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530820.937:14837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530820.938:14838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.130:14839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.131:14840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.131:14841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72699 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530821.149:14842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.149:14843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.161:14844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.161:14845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.162:14846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72713 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530821.184:14847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.184:14848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.198:14849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.198:14850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.199:14851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72734 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530821.229:14852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.229:14853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.239:14854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.239:14855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.240:14856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72748 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530821.260:14857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.260:14858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.270:14859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.270:14860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.271:14861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530821.326:14862): pid=72778 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530821.326:14863): pid=72778 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7172626C6C6A6168766F7875726D6F767A6C67697173707872686C706672747A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832312E313531343636312D37303930392D333135323530353833373137312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530821.327:14864): pid=72778 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530821.328:14865): pid=72778 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530821.482:14866): pid=72778 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530821.482:14867): pid=72778 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530821.485:14868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.485:14869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.495:14870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.495:14871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.496:14872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72782 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530821.517:14873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.517:14874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.700:14875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.700:14876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.701:14877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72797 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530821.725:14878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.725:14879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.735:14880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.735:14881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.737:14882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530821.767:14883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.767:14884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.783:14885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.783:14886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.786:14887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72832 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530821.814:14888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.814:14889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.825:14890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.825:14891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.826:14892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530821.846:14893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530821.846:14894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530821.856:14895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530821.856:14896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530821.857:14897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72861 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530821.911:14898): pid=72876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530821.911:14899): pid=72876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696F6B77717A6175666D7669627067656C68746D667375677869726E726A6371203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832312E373237313037352D37303930392D35343730393231303630333330372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530821.911:14900): pid=72876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530821.913:14901): pid=72876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530822.068:14902): pid=72876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530822.068:14903): pid=72876 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530822.071:14904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.071:14905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.082:14906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.082:14907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.083:14908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72880 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530822.103:14909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.103:14910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.281:14911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.281:14912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.282:14913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72895 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530822.299:14914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.299:14915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.308:14916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.308:14917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.310:14918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72909 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530822.338:14919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.338:14920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.358:14921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.358:14922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.359:14923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530822.388:14924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.389:14925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.408:14926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.408:14927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.409:14928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530822.427:14929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.427:14930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.437:14931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.437:14932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.438:14933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72959 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530822.488:14934): pid=72974 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530822.489:14935): pid=72974 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F786B67646C6172676470677875696D676A79727062686D727862786C786D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832322E333031343031342D37303930392D393832363831313234353233302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530822.489:14936): pid=72974 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530822.490:14937): pid=72974 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530822.649:14938): pid=72974 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530822.649:14939): pid=72974 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530822.652:14940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.652:14941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.661:14942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.661:14943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.662:14944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530822.681:14945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.681:14946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.890:14947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.890:14948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.891:14949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=72993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530822.910:14950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.910:14951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.921:14952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.922:14953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.922:14954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73007 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530822.944:14955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.944:14956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530822.959:14957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530822.959:14958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530822.960:14959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530822.990:14960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530822.991:14961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530823.001:14962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530823.002:14963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530823.003:14964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73042 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530823.022:14965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530823.022:14966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530823.032:14967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530823.032:14968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530823.033:14969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73057 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530823.095:14970): pid=73072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530823.095:14971): pid=73072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726765746E73746D696E76616D716E6B6177646F627169676D64796B74716C77203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832322E3931323635362D37303930392D3135393439383034303332383735322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530823.096:14972): pid=73072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530823.098:14973): pid=73072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530823.264:14974): pid=73072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530823.264:14975): pid=73072 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530823.268:14976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530823.268:14977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530823.282:14978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530823.282:14979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530823.283:14980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530823.315:14981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530823.315:14982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530823.494:14983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530823.494:14984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530823.495:14985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73091 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530823.517:14986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530823.517:14987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530823.525:14988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530823.525:14989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530823.526:14990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530823.547:14991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530823.547:14992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530823.567:14993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530823.567:14994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530823.568:14995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73126 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530823.596:14996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530823.596:14997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530823.607:14998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530823.607:14999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530823.608:15000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73140 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530823.626:15001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530823.626:15002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530823.639:15003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530823.639:15004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530823.640:15005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73155 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530823.691:15006): pid=73170 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530823.691:15007): pid=73170 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6265636C6A73637A6967656C656E656E6466756C75676E6B7A6C796176637368203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832332E353138333337372D37303930392D3130383430373732323338373831332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530823.692:15008): pid=73170 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530823.693:15009): pid=73170 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530823.850:15010): pid=73170 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530823.851:15011): pid=73170 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530823.854:15012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530823.854:15013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530823.864:15014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530823.865:15015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530823.865:15016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73174 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530823.884:15017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530823.884:15018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.094:15019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.094:15020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.095:15021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73189 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530824.112:15022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.112:15023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.123:15024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.123:15025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.124:15026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530824.145:15027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.145:15028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.160:15029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.161:15030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.161:15031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73224 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530824.198:15032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.198:15033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.216:15034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.216:15035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.217:15036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73238 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530824.244:15037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.244:15038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.256:15039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.256:15040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.257:15041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73253 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530824.312:15042): pid=73268 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530824.312:15043): pid=73268 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66617569617A756A68746379797877756167646B6E70796A77756E6373727878203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832342E313134363036392D37303930392D3135323738383131303535313037342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530824.313:15044): pid=73268 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530824.314:15045): pid=73268 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530824.486:15046): pid=73268 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530824.487:15047): pid=73268 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530824.489:15048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.489:15049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.499:15050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.500:15051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.500:15052): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530824.522:15053): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.522:15054): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.715:15055): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.715:15056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.716:15057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530824.733:15058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.733:15059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.744:15060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.744:15061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.745:15062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73302 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530824.767:15063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.767:15064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.783:15065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.783:15066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.784:15067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73323 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530824.817:15068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.817:15069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.828:15070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.828:15071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.829:15072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73337 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530824.848:15073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530824.848:15074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530824.858:15075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530824.858:15076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530824.859:15077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530824.911:15078): pid=73367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530824.911:15079): pid=73367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7775756A6570796F7379787A6C7369706B77736771697867786B6A797065766A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832342E373335323235372D37303930392D37373330373230343935353932322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530824.912:15080): pid=73367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530824.914:15081): pid=73367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530825.078:15082): pid=73367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530825.078:15083): pid=73367 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530825.081:15084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.081:15085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.091:15086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.091:15087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.092:15088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73371 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530825.112:15089): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.112:15090): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.314:15091): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.314:15092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.315:15093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530825.333:15094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.333:15095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.343:15096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.343:15097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.344:15098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530825.367:15099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.367:15100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.383:15101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.383:15102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.385:15103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73423 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530825.417:15104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.417:15105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.429:15106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.429:15107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.430:15108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73437 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530825.450:15109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.450:15110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.461:15111): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.461:15112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.462:15113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530825.515:15114): pid=73467 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530825.515:15115): pid=73467 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716B7971627677666F78716C766C736F6C667872617962676562627066737A71203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832352E3333353332342D37303930392D35343736363734333433313438382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530825.516:15116): pid=73467 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530825.518:15117): pid=73467 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530825.671:15118): pid=73467 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530825.671:15119): pid=73467 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530825.673:15120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.674:15121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.684:15122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.684:15123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.685:15124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73471 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530825.703:15125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.703:15126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.913:15127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.913:15128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.914:15129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73486 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530825.938:15130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.938:15131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.948:15132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.949:15133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.949:15134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530825.971:15135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530825.971:15136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530825.986:15137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530825.986:15138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530825.987:15139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73521 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530826.018:15140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.018:15141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530826.028:15142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530826.028:15143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530826.029:15144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73535 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530826.048:15145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.048:15146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530826.058:15147): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530826.058:15148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530826.059:15149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530826.110:15150): pid=73565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530826.111:15151): pid=73565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716574736565716C797562657A7374736B776366757964696571786B69626269203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832352E3934303739382D37303930392D3136343734313933383738373130372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530826.111:15152): pid=73565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530826.113:15153): pid=73565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530826.270:15154): pid=73565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530826.270:15155): pid=73565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530826.272:15156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.272:15157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530826.282:15158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530826.282:15159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530826.283:15160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73569 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530826.303:15161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.303:15162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530826.487:15163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530826.487:15164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530826.488:15165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73584 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530826.505:15166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.505:15167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530826.520:15168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530826.520:15169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530826.521:15170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73598 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530826.544:15171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.545:15172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530826.563:15173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530826.563:15174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530826.564:15175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73619 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530826.593:15176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.593:15177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530826.604:15178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530826.604:15179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530826.605:15180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73633 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530826.623:15181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.623:15182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530826.634:15183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530826.634:15184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530826.635:15185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73648 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530826.685:15186): pid=73663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530826.685:15187): pid=73663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66716A6169667063666767657771647A7078796365796B726F6D62776B6A7A67203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832362E353037343033362D37303930392D32323738383433383337303732332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530826.685:15188): pid=73663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530826.687:15189): pid=73663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530826.841:15190): pid=73663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530826.841:15191): pid=73663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530826.844:15192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.844:15193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530826.857:15194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530826.857:15195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530826.858:15196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73667 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530826.877:15197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530826.877:15198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.063:15199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.063:15200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.064:15201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73682 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530827.082:15202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.083:15203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.092:15204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.092:15205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.093:15206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530827.115:15207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.116:15208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.130:15209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.130:15210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.131:15211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73717 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530827.179:15212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.179:15213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.190:15214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.191:15215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.192:15216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73731 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530827.211:15217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.212:15218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.227:15219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.227:15220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.228:15221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73746 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530827.286:15222): pid=73761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530827.286:15223): pid=73761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B646B6C62737162736D686B65646F6F797074737376677073746577766C6C70203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832372E303834373036332D37303930392D3232383039313138313630353430302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530827.287:15224): pid=73761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530827.288:15225): pid=73761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530827.446:15226): pid=73761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530827.446:15227): pid=73761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530827.448:15228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.448:15229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.459:15230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.459:15231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.460:15232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73765 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530827.478:15233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.478:15234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.691:15235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.691:15236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.692:15237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530827.709:15238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.709:15239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.719:15240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.719:15241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.720:15242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73794 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530827.742:15243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.743:15244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.756:15245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.756:15246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.757:15247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73815 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530827.786:15248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.786:15249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.796:15250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.796:15251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.797:15252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73829 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530827.816:15253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530827.816:15254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530827.829:15255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530827.829:15256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530827.831:15257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530827.891:15258): pid=73859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530827.891:15259): pid=73859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E61616C656E6E67626F65796673657A65746E727A6563647A766D6B6D6677203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832372E373131353032382D37303930392D35353231363237343432303731362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530827.892:15260): pid=73859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530827.893:15261): pid=73859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530828.052:15262): pid=73859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530828.052:15263): pid=73859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530828.054:15264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530828.055:15265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530828.065:15266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530828.065:15267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530828.066:15268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73863 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530828.085:15269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530828.086:15270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530828.299:15271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530828.299:15272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530828.300:15273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73878 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530828.319:15274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530828.319:15275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530828.328:15276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530828.328:15277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530828.329:15278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73892 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530828.349:15279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530828.349:15280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530828.363:15281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530828.363:15282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530828.364:15283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73913 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530828.395:15284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530828.395:15285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530828.405:15286): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530828.405:15287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530828.406:15288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530828.425:15289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530828.426:15290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530828.435:15291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530828.435:15292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530828.436:15293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73942 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530828.485:15294): pid=73957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530828.485:15295): pid=73957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6266697273706A6D726771666A65636E6C6F7A7972787466746B6C65676574203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832382E333230373833362D37303930392D36343838373833333631303535362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530828.485:15296): pid=73957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530828.487:15297): pid=73957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530828.644:15298): pid=73957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530828.644:15299): pid=73957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530828.646:15300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530828.647:15301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530828.657:15302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530828.657:15303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530828.658:15304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73961 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530828.677:15305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530828.677:15306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.019:15307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.019:15308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.020:15309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73981 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530829.039:15310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.039:15311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.048:15312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.049:15313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.049:15314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=73995 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530829.071:15315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.071:15316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.088:15317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.088:15318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.089:15319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74016 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530829.121:15320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.121:15321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.132:15322): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.132:15323): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.133:15324): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74030 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530829.151:15325): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.151:15326): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.162:15327): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.162:15328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.163:15329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74045 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530829.215:15330): pid=74060 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530829.215:15331): pid=74060 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E697A7966776F786A6F7268636F677A72617168646670636A61716873627A79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832392E303430393139352D37333937392D35373939313637363138383931312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530829.216:15332): pid=74060 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530829.218:15333): pid=74060 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530829.382:15334): pid=74060 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530829.382:15335): pid=74060 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530829.385:15336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.385:15337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.396:15338): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.396:15339): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.397:15340): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74064 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530829.416:15341): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.416:15342): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.632:15343): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.632:15344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.633:15345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74081 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530829.651:15346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.651:15347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.660:15348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.660:15349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.661:15350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530829.684:15351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.684:15352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.699:15353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.699:15354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.700:15355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74116 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530829.730:15356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.731:15357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.742:15358): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.742:15359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.742:15360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74130 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530829.760:15361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.760:15362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530829.770:15363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530829.770:15364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530829.771:15365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74145 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530829.828:15366): pid=74160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530829.828:15367): pid=74160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726B6A636C6D7473716966656C747865647473627A7674766E786C6C6774706E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303832392E363532393730362D37343037392D3135383932313931383232383237302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530829.828:15368): pid=74160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530829.830:15369): pid=74160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530829.995:15370): pid=74160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530829.995:15371): pid=74160 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530829.997:15372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530829.998:15373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.008:15374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.008:15375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.009:15376): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74164 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530830.042:15377): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530830.042:15378): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.256:15379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.256:15380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.257:15381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530830.276:15382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530830.276:15383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.285:15384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.285:15385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.286:15386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74196 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530830.309:15387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530830.309:15388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.325:15389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.325:15390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.326:15391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74218 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530830.356:15392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530830.356:15393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.366:15394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.366:15395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.367:15396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74232 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530830.393:15397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530830.393:15398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.407:15399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.407:15400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.408:15401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74247 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530830.465:15402): pid=74262 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530830.465:15403): pid=74262 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726A74707672726B667467666F76667A68776B66697679736A706A6E6F697678203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833302E3237373234352D37343137392D3232393739383531363339373031302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530830.466:15404): pid=74262 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530830.467:15405): pid=74262 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530830.649:15406): pid=74262 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530830.649:15407): pid=74262 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530830.652:15408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530830.652:15409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.662:15410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.662:15411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.663:15412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74266 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530830.682:15413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530830.682:15414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.901:15415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.901:15416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.901:15417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530830.919:15418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530830.919:15419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.929:15420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.929:15421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.930:15422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74297 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530830.952:15423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530830.952:15424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530830.967:15425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530830.967:15426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530830.968:15427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74318 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530831.002:15428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.002:15429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.011:15430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.011:15431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.012:15432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74332 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530831.036:15433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.036:15434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.046:15435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.046:15436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.047:15437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74347 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530831.101:15438): pid=74362 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530831.102:15439): pid=74362 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F7A6A6D6B6C6C6663696263616D677179747766646773776862796E616775203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833302E3932313435332D37343238312D3233343132343536383536383133302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530831.102:15440): pid=74362 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530831.104:15441): pid=74362 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530831.272:15442): pid=74362 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530831.272:15443): pid=74362 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530831.275:15444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.275:15445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.286:15446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.286:15447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.287:15448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74366 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530831.306:15449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.306:15450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.523:15451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.523:15452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.525:15453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74383 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530831.542:15454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.542:15455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.552:15456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.552:15457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.553:15458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74397 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530831.574:15459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.574:15460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.616:15461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.616:15462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.617:15463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530831.648:15464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.648:15465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.659:15466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.659:15467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.660:15468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74432 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530831.679:15469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.680:15470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.689:15471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.690:15472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.690:15473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74447 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530831.744:15474): pid=74462 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530831.744:15475): pid=74462 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69796D67796C72796E6B686A736C707278767473676B636A626D6F7665707A79203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833312E353434333135362D37343338312D3235353839323230343436393035382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530831.744:15476): pid=74462 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530831.746:15477): pid=74462 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530831.892:15478): pid=74462 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530831.892:15479): pid=74462 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530831.895:15480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.895:15481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.911:15482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.911:15483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.912:15484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74467 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530831.934:15485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.934:15486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.944:15487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.944:15488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.945:15489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74481 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530831.964:15490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530831.964:15491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530831.978:15492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530831.978:15493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530831.979:15494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74497 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530832.008:15495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530832.008:15496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530832.019:15497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530832.019:15498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530832.020:15499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530832.040:15500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530832.040:15501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530832.050:15502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530832.050:15503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530832.051:15504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74526 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530832.102:15505): pid=74541 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530832.103:15506): pid=74541 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777A796668687977657169646E67797A657A676E62706B75667767776C796863203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833312E353434333135362D37343338312D3235353839323230343436393035382F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530832.104:15507): pid=74541 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530832.105:15508): pid=74541 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530832.271:15509): pid=74541 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530832.272:15510): pid=74541 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530832.274:15511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530832.274:15512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530832.320:15513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530832.320:15514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530832.321:15515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74545 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530832.340:15516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530832.340:15517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530832.597:15518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530832.597:15519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530832.598:15520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74562 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530832.616:15521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530832.616:15522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530832.626:15523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530832.626:15524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530832.627:15525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530832.649:15526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530832.649:15527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530832.664:15528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530832.664:15529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530832.665:15530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74597 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530832.695:15531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530832.695:15532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530832.705:15533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530832.706:15534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530832.706:15535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74611 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530832.725:15536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530832.725:15537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530832.737:15538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530832.737:15539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530832.738:15540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74626 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530832.791:15541): pid=74641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530832.791:15542): pid=74641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78726B70616D72676A6170627A6D70656C6C777A63786A616D75627465657767203B2068747470735F70726F78793D272720687474705F70726F78793D272720444F434B45525F434C49454E545F54494D454F55543D31323020434F4D504F53455F485454505F54494D454F55543D313230202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833322E363138353935362D37343536302D32383535303732323033333639312F416E736962616C6C5A5F646F636B65725F636F6D706F73652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530832.792:15543): pid=74641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530832.793:15544): pid=74641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530833.364:15545): prog-id=476 op=LOAD
type=BPF msg=audit(1748530833.365:15546): prog-id=477 op=LOAD
type=SYSCALL msg=audit(1748530833.365:15546): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000147ad0 a2=90 a3=0 items=0 ppid=74678 pid=74689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530833.365:15546): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313138386636393831373233616534333630636130376565
type=BPF msg=audit(1748530833.365:15547): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530833.365:15548): prog-id=478 op=LOAD
type=SYSCALL msg=audit(1748530833.365:15548): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000147c48 a2=90 a3=0 items=0 ppid=74678 pid=74689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530833.365:15548): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313138386636393831373233616534333630636130376565
type=BPF msg=audit(1748530833.365:15549): prog-id=479 op=LOAD
type=SYSCALL msg=audit(1748530833.365:15549): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001479d8 a2=90 a3=0 items=0 ppid=74678 pid=74689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530833.365:15549): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313138386636393831373233616534333630636130376565
type=BPF msg=audit(1748530833.366:15550): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530833.366:15551): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530833.366:15552): prog-id=480 op=LOAD
type=SYSCALL msg=audit(1748530833.366:15552): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000147eb0 a2=90 a3=0 items=0 ppid=74678 pid=74689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530833.366:15552): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313138386636393831373233616534333630636130376565
type=USER_END msg=audit(1748530833.451:15553): pid=74641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530833.451:15554): pid=74641 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530833.453:15555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530833.453:15556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530833.464:15557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530833.464:15558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530833.465:15559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530833.486:15560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530833.486:15561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530833.877:15562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530833.877:15563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530833.878:15564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530833.895:15565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530833.895:15566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530833.904:15567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530833.904:15568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530833.905:15569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74800 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530833.928:15570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530833.928:15571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530833.942:15572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530833.942:15573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530833.943:15574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74821 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530833.972:15575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530833.972:15576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530833.985:15577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530833.985:15578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530833.985:15579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74835 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=BPF msg=audit(1748530834.006:15580): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530834.006:15581): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748530834.007:15582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530834.007:15583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530834.018:15584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530834.018:15585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530834.018:15586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74866 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530834.077:15587): pid=74886 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530834.077:15588): pid=74886 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E766B756F716B71736B6A6A796E73647A757878767263626A6E6D6369746E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833332E383937303834352D37343738342D38353533313030303133303732342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530834.078:15589): pid=74886 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530834.080:15590): pid=74886 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530834.301:15591): pid=74886 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530834.301:15592): pid=74886 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530834.303:15593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530834.303:15594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530834.316:15595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530834.316:15596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530834.316:15597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74890 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530834.337:15598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530834.337:15599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530834.784:15600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530834.784:15601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530834.784:15602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74909 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530834.804:15603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530834.804:15604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530834.813:15605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530834.813:15606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530834.814:15607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74923 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530834.835:15608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530834.835:15609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530834.862:15610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530834.862:15611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530834.866:15612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530834.902:15613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530834.902:15614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530834.912:15615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530834.912:15616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530834.914:15617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74958 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530834.945:15618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530834.945:15619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530834.955:15620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530834.955:15621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530834.956:15622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74973 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530835.006:15623): pid=74988 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530835.006:15624): pid=74988 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7967666F766D6961776F6376646B66617978736F75716A74706D6677746A6B61203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833342E383035383939362D37343930372D3138323931313131373238323532312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530835.007:15625): pid=74988 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530835.009:15626): pid=74988 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530835.168:15627): pid=74988 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530835.168:15628): pid=74988 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530835.170:15629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.170:15630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.185:15631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.185:15632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.186:15633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=74994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530835.213:15634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.213:15635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.223:15636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.223:15637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.224:15638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75010 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530835.246:15639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.246:15640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.260:15641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.260:15642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.261:15643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530835.295:15644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.295:15645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.306:15646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.306:15647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.307:15648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530835.328:15649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.328:15650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.338:15651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.338:15652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.338:15653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75056 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530835.388:15654): pid=75071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530835.388:15655): pid=75071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7464676E69696E6E6C766679696F676671666B6763776B6D6D786D6E796361203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833342E383035383939362D37343930372D3138323931313131373238323532312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530835.388:15656): pid=75071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530835.390:15657): pid=75071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530835.571:15658): pid=75071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530835.571:15659): pid=75071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530835.574:15660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.574:15661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.584:15662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.584:15663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.585:15664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75075 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530835.603:15665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.603:15666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.823:15667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.823:15668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.824:15669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75092 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530835.842:15670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.842:15671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.853:15672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.853:15673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.854:15674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75106 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530835.876:15675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.876:15676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.891:15677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.891:15678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.892:15679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75127 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530835.925:15680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.925:15681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.935:15682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.935:15683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.936:15684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75141 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530835.955:15685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530835.955:15686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530835.965:15687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530835.965:15688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530835.966:15689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75156 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530836.017:15690): pid=75171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530836.017:15691): pid=75171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697669776A767171687468636D746C7974766B62696561647A7971746575696D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833352E383434323236382D37353039302D3135333338323537323837353237372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530836.018:15692): pid=75171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530836.019:15693): pid=75171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530836.394:15694): pid=75171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530836.394:15695): pid=75171 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530836.397:15696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530836.397:15697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530836.410:15698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530836.410:15699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530836.411:15700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530836.435:15701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530836.435:15702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530836.646:15703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530836.646:15704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530836.647:15705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75199 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530836.666:15706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530836.666:15707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530836.676:15708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530836.676:15709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530836.677:15710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75213 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530836.699:15711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530836.699:15712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530836.714:15713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530836.714:15714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530836.715:15715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530836.745:15716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530836.746:15717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530836.756:15718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530836.756:15719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530836.757:15720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75248 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530836.780:15721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530836.780:15722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530836.790:15723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530836.790:15724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530836.791:15725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75263 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530836.852:15726): pid=75278 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530836.852:15727): pid=75278 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667776706E7065686265616B7266686878746A756C6A67677362637667706775203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833362E363638323337372D37353139372D34373235383434393231383531342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530836.853:15728): pid=75278 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530836.854:15729): pid=75278 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530837.121:15730): pid=75278 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530837.122:15731): pid=75278 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530837.124:15732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530837.124:15733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530837.135:15734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530837.135:15735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530837.135:15736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75291 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530837.154:15737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530837.154:15738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530837.373:15739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530837.373:15740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530837.374:15741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75308 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530837.393:15742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530837.394:15743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530837.403:15744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530837.404:15745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530837.404:15746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75322 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530837.427:15747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530837.427:15748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530837.443:15749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530837.443:15750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530837.444:15751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75343 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530837.472:15752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530837.472:15753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530837.484:15754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530837.484:15755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530837.485:15756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530837.504:15757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530837.508:15758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530837.515:15759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530837.515:15760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530837.516:15761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75372 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530837.572:15762): pid=75387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530837.572:15763): pid=75387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77716F6673666F78646A6379796D707163716B7566626470616A6875717A6872203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833372E333935323732352D37353330362D3237363837363333383934353535332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530837.572:15764): pid=75387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530837.574:15765): pid=75387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530837.812:15766): pid=75387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530837.812:15767): pid=75387 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530837.814:15768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530837.815:15769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530837.825:15770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530837.825:15771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530837.826:15772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75400 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530837.849:15773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530837.849:15774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530838.651:15775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530838.651:15776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530838.652:15777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75421 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530838.671:15778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530838.672:15779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530838.680:15780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530838.680:15781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530838.682:15782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75435 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530838.704:15783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530838.704:15784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530838.718:15785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530838.718:15786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530838.719:15787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530838.746:15788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530838.746:15789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530838.757:15790): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530838.757:15791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530838.758:15792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75470 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530838.776:15793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530838.776:15794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530838.785:15795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530838.785:15796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530838.786:15797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530838.837:15798): pid=75500 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530838.837:15799): pid=75500 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E7A6E707070706C6A7A7667636B6B72776F6F6E617573616B656569646270203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833382E363733303836342D37353431392D38373335383834313030333138382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530838.838:15800): pid=75500 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530838.839:15801): pid=75500 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530839.392:15802): pid=75500 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530839.394:15803): pid=75500 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530839.397:15804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530839.397:15805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530839.407:15806): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530839.407:15807): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530839.408:15808): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75520 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530839.429:15809): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530839.429:15810): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530839.903:15811): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530839.903:15812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530839.904:15813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75540 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530839.923:15814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530839.923:15815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530839.935:15816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530839.935:15817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530839.936:15818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75554 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530839.960:15819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530839.960:15820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530839.977:15821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530839.977:15822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530839.978:15823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530840.012:15824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.012:15825): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530840.023:15826): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530840.023:15827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530840.024:15828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75589 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530840.044:15829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.044:15830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530840.056:15831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530840.056:15832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530840.057:15833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530840.114:15834): pid=75619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530840.114:15835): pid=75619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63686679756772796A6A786A68617668786D7378696F6A6F7677716A63786F6A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303833392E393234343336362D37353533382D3139313431383037323136333936332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530840.114:15836): pid=75619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530840.119:15837): pid=75619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530840.302:15838): pid=75619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530840.302:15839): pid=75619 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530840.305:15840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.305:15841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530840.315:15842): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530840.316:15843): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530840.317:15844): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75623 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530840.336:15845): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.336:15846): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530840.571:15847): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530840.571:15848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530840.572:15849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530840.593:15850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.593:15851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530840.603:15852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530840.603:15853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530840.604:15854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75669 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530840.624:15855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.625:15856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530840.638:15857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530840.639:15858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530840.640:15859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75690 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530840.667:15860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.667:15861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530840.678:15862): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530840.678:15863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530840.679:15864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75704 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530840.698:15865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.698:15866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530840.708:15867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530840.708:15868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530840.709:15869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75719 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530840.764:15870): pid=75734 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530840.764:15871): pid=75734 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75746573627A7271647965786467646365797A7377716F657964626975756D70203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834302E353935303134362D37353633382D32333834343634373939333238322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530840.765:15872): pid=75734 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530840.766:15873): pid=75734 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530840.914:15874): pid=75734 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530840.914:15875): pid=75734 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530840.917:15876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.917:15877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530840.927:15878): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530840.927:15879): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530840.927:15880): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75762 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530840.948:15881): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530840.949:15882): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530841.223:15883): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530841.223:15884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530841.224:15885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75793 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530841.243:15886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530841.243:15887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530841.253:15888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530841.253:15889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530841.253:15890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75807 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530841.277:15891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530841.277:15892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530841.292:15893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530841.293:15894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530841.293:15895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530841.324:15896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530841.325:15897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530841.336:15898): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530841.336:15899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530841.337:15900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75842 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530841.356:15901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530841.356:15902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530841.367:15903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530841.367:15904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530841.368:15905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75857 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530841.427:15906): pid=75872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530841.427:15907): pid=75872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67617762706974626278737474686C76776B6F69676B79676A6C756D6C776E6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834312E323434363530312D37353738302D38373637333839383136313139302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530841.428:15908): pid=75872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530841.429:15909): pid=75872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530841.604:15910): pid=75872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530841.604:15911): pid=75872 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530841.606:15912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530841.607:15913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530841.618:15914): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530841.618:15915): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530841.619:15916): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75876 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530841.639:15917): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530841.639:15918): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530841.945:15919): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530841.945:15920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530841.946:15921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75893 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530841.965:15922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530841.965:15923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530841.974:15924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530841.974:15925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530841.975:15926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530841.997:15927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530841.997:15928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.012:15929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.012:15930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.013:15931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75928 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530842.043:15932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.044:15933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.056:15934): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.056:15935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.057:15936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75942 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530842.079:15937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.080:15938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.092:15939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.092:15940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.094:15941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75957 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530842.149:15942): pid=75972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530842.149:15943): pid=75972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777A7666696C7061667A7665706F706C7869716A7878666E6D76737A68737367203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834312E3936363836342D37353839312D3232373936303631323437393736322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530842.149:15944): pid=75972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530842.151:15945): pid=75972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530842.339:15946): pid=75972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530842.340:15947): pid=75972 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530842.342:15948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.342:15949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.352:15950): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.352:15951): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.353:15952): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75976 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530842.373:15953): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.373:15954): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.559:15955): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.559:15956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.560:15957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=75992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530842.578:15958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.578:15959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.587:15960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.587:15961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.588:15962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76006 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530842.610:15963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.610:15964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.624:15965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.624:15966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.625:15967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530842.655:15968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.655:15969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.666:15970): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.667:15971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.667:15972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530842.686:15973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.686:15974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.696:15975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.696:15976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.697:15977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76056 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530842.757:15978): pid=76071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530842.757:15979): pid=76071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7970627169676A6D78716562797774657869786A796363796269657577626D6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834322E353739373330372D37353839312D3138303739383432313136373433382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530842.758:15980): pid=76071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530842.759:15981): pid=76071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530842.918:15982): pid=76071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530842.918:15983): pid=76071 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530842.921:15984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.922:15985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530842.935:15986): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530842.935:15987): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530842.936:15988): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76075 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530842.955:15989): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530842.955:15990): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.147:15991): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.147:15992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.148:15993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76090 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530843.165:15994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.166:15995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.175:15996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.176:15997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.176:15998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76104 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530843.210:15999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.210:16000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.224:16001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.225:16002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.225:16003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76125 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530843.255:16004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.255:16005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.265:16006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.266:16007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.267:16008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530843.288:16009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.288:16010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.298:16011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.299:16012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.300:16013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76154 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530843.352:16014): pid=76169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530843.352:16015): pid=76169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6572676F666C6E756A6D797373677472726D7062646E637469636D6873786F6B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834332E3136373535362D37353839312D32393037383735353035373430352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530843.353:16016): pid=76169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530843.355:16017): pid=76169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530843.514:16018): pid=76169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530843.514:16019): pid=76169 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530843.517:16020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.517:16021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.527:16022): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.527:16023): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.528:16024): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76173 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530843.547:16025): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.547:16026): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.770:16027): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.770:16028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.771:16029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530843.791:16030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.791:16031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.802:16032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.802:16033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.803:16034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530843.831:16035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.831:16036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.848:16037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.848:16038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.849:16039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530843.894:16040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.895:16041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.905:16042): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.905:16043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.906:16044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530843.928:16045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530843.928:16046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530843.938:16047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530843.938:16048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530843.939:16049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76252 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530843.994:16050): pid=76267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530843.994:16051): pid=76267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636965706C6E64756F6761616D6C6C627A746167767A7A6D6F736C7669726B70203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834332E373932373236332D37353839312D37303235373036333130313933312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530843.995:16052): pid=76267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530843.996:16053): pid=76267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530844.151:16054): pid=76267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530844.151:16055): pid=76267 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530844.154:16056): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530844.155:16057): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530844.164:16058): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530844.164:16059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530844.165:16060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530844.186:16061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530844.186:16062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530844.387:16063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530844.387:16064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530844.388:16065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530844.407:16066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530844.407:16067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530844.417:16068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530844.417:16069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530844.418:16070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530844.439:16071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530844.439:16072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530844.453:16073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530844.453:16074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530844.454:16075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76321 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530844.482:16076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530844.482:16077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530844.494:16078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530844.494:16079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530844.495:16080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530844.515:16081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530844.515:16082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530844.525:16083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530844.525:16084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530844.526:16085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76350 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530844.577:16086): pid=76365 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530844.578:16087): pid=76365 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F6C72696B626C6C6C6D6A6C6261756A706D716873797962767A716A6C777A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834342E343039313732332D37353839312D3138313032383034313432343731392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530844.578:16088): pid=76365 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530844.579:16089): pid=76365 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530844.750:16090): pid=76365 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530844.750:16091): pid=76365 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530844.752:16092): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530844.752:16093): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530844.764:16094): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530844.764:16095): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530844.765:16096): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76369 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530844.784:16097): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530844.784:16098): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530844.976:16099): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530844.977:16100): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530844.977:16101): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530844.999:16102): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530844.999:16103): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.010:16104): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.010:16105): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.011:16106): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530845.037:16107): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530845.037:16108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.051:16109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.051:16110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.052:16111): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530845.089:16112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530845.089:16113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.101:16114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.101:16115): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.102:16116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76433 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530845.123:16117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530845.123:16118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.134:16119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.134:16120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.135:16121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76448 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530845.191:16122): pid=76463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530845.191:16123): pid=76463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6874786B736A6766636D6C6A70706771786F666D76786A626868627569637672203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834352E3030303830362D37353839312D34303835333035393831323638372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530845.191:16124): pid=76463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530845.193:16125): pid=76463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530845.391:16126): pid=76463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530845.391:16127): pid=76463 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530845.397:16128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530845.398:16129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.410:16130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.410:16131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.411:16132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530845.432:16133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530845.432:16134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.662:16135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.662:16136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.663:16137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76486 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530845.681:16138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530845.681:16139): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.691:16140): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.691:16141): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.692:16142): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530845.713:16143): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530845.713:16144): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.728:16145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.728:16146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.729:16147): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76521 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530845.759:16148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530845.759:16149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.769:16150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.769:16151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.770:16152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76535 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530845.789:16153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530845.789:16154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530845.800:16155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530845.800:16156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530845.801:16157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530845.853:16158): pid=76565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530845.853:16159): pid=76565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A6E7878666F61776D6865716168626170687369776A787469746B6A6E716B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834352E363832393638392D37353839312D3137383534393131393330303035362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530845.854:16160): pid=76565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530845.856:16161): pid=76565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530846.033:16162): pid=76565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530846.033:16163): pid=76565 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530846.035:16164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.036:16165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.047:16166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.047:16167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.048:16168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76569 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.067:16169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.067:16170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.252:16171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.253:16172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.253:16173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76584 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.273:16174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.273:16175): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.284:16176): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.284:16177): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.285:16178): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76598 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.307:16179): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.307:16180): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.322:16181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.322:16182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.323:16183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76619 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.354:16184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.354:16185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.365:16186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.365:16187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.366:16188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76633 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.385:16189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.385:16190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.399:16191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.399:16192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.400:16193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76648 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530846.451:16194): pid=76663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530846.451:16195): pid=76663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6862636571786F78666665756D786B7164677273776C6662637A71616D787773203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834362E323735303832382D37353839312D3134373936373336303834383533372F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530846.451:16196): pid=76663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530846.453:16197): pid=76663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530846.614:16198): pid=76663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530846.614:16199): pid=76663 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530846.616:16200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.617:16201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.626:16202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.626:16203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.627:16204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76667 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.645:16205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.645:16206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.847:16207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.847:16208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.849:16209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76682 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.867:16210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.867:16211): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.881:16212): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.881:16213): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.882:16214): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.903:16215): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.903:16216): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.917:16217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.917:16218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.918:16219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76717 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.947:16220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.947:16221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.958:16222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.958:16223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.959:16224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76731 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530846.977:16225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530846.978:16226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530846.988:16227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530846.988:16228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530846.989:16229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76746 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530847.041:16230): pid=76761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530847.041:16231): pid=76761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707766667862727574797A71667961626C70626D6E716D637A72737479676C6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834362E383731313031342D37353839312D31333533303737393135313236392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530847.042:16232): pid=76761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530847.043:16233): pid=76761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530847.213:16234): pid=76761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530847.213:16235): pid=76761 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530847.215:16236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530847.216:16237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530847.226:16238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530847.226:16239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530847.227:16240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76765 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530847.246:16241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530847.246:16242): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530847.464:16243): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530847.464:16244): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530847.465:16245): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530847.482:16246): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530847.482:16247): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530847.491:16248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530847.491:16249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530847.492:16250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76794 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530847.518:16251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530847.518:16252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530847.534:16253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530847.534:16254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530847.535:16255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76815 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530847.572:16256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530847.573:16257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530847.584:16258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530847.584:16259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530847.585:16260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76829 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530847.603:16261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530847.603:16262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530847.613:16263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530847.613:16264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530847.614:16265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530847.669:16266): pid=76859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530847.670:16267): pid=76859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676366616B6B7171756861716A737577666E6E766473647A66747074636E6865203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834372E343834323931382D37353839312D32393432333534333432313739312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530847.670:16268): pid=76859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530847.672:16269): pid=76859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530847.935:16270): pid=76859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530847.935:16271): pid=76859 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530847.937:16272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530847.938:16273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530847.948:16274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530847.948:16275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530847.948:16276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76863 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530847.967:16277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530847.968:16278): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.154:16279): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.154:16280): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.155:16281): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76878 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530848.173:16282): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.173:16283): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.184:16284): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.184:16285): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.185:16286): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76892 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530848.206:16287): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.206:16288): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.220:16289): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.220:16290): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.221:16291): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76913 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530848.253:16292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.253:16293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.264:16294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.264:16295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.264:16296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530848.284:16297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.285:16298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.295:16299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.295:16300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.296:16301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76942 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530848.347:16302): pid=76957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530848.347:16303): pid=76957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716C6A6B64756C746D797A6D686A77646F6561626E656271727A6A6279717063203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834382E313735303632322D37353839312D34323639363830353137393136312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530848.347:16304): pid=76957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530848.349:16305): pid=76957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530848.500:16306): pid=76957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530848.501:16307): pid=76957 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530848.503:16308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.504:16309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.519:16310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.519:16311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.521:16312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76961 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530848.543:16313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.543:16314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.735:16315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.735:16316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.736:16317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76976 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530848.754:16318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.755:16319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.764:16320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.764:16321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.765:16322): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=76990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530848.788:16323): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.788:16324): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.803:16325): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.803:16326): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.804:16327): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530848.831:16328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.831:16329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.842:16330): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.842:16331): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.845:16332): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530848.877:16333): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530848.877:16334): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530848.889:16335): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530848.889:16336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530848.890:16337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77040 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530848.944:16338): pid=77055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530848.945:16339): pid=77055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B736E7768796562776B6964726675676A626677687966696A68726D69657078203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834382E373536353337322D37353839312D3237383430393837393135333134332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530848.945:16340): pid=77055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530848.946:16341): pid=77055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530849.111:16342): pid=77055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530849.111:16343): pid=77055 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530849.114:16344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.114:16345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.125:16346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.125:16347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.126:16348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77059 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530849.145:16349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.145:16350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.323:16351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.323:16352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.324:16353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77074 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530849.342:16354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.342:16355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.351:16356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.352:16357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.353:16358): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77088 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530849.376:16359): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.376:16360): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.390:16361): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.390:16362): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.391:16363): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530849.421:16364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.421:16365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.431:16366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.431:16367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.432:16368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530849.451:16369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.451:16370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.463:16371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.463:16372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.464:16373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77138 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530849.524:16374): pid=77153 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530849.525:16375): pid=77153 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A656278777171637A676B6E636C6D736171747A75626E74757065696C7463203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834392E3334343230342D37353839312D3236343733343732393532323137322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530849.527:16376): pid=77153 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530849.531:16377): pid=77153 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530849.687:16378): pid=77153 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530849.687:16379): pid=77153 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530849.690:16380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.691:16381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.700:16382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.700:16383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.701:16384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77157 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530849.721:16385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.721:16386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.901:16387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.901:16388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.902:16389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77172 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530849.920:16390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.920:16391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.930:16392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.930:16393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.931:16394): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77186 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530849.953:16395): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530849.954:16396): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530849.970:16397): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530849.970:16398): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530849.971:16399): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77207 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530850.002:16400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.003:16401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530850.015:16402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530850.015:16403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530850.016:16404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77221 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530850.036:16405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.036:16406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530850.047:16407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530850.047:16408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530850.048:16409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77236 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530850.104:16410): pid=77251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530850.104:16411): pid=77251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627A7A6F7461756D646E676B7567756962626675766178796764727675716472203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303834392E393232323933372D37353839312D33373730393337343136303335352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530850.104:16412): pid=77251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530850.106:16413): pid=77251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530850.283:16414): pid=77251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530850.283:16415): pid=77251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530850.286:16416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.287:16417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530850.297:16418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530850.297:16419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530850.298:16420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77255 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530850.321:16421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.321:16422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530850.518:16423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530850.518:16424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530850.519:16425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77291 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530850.548:16426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.549:16427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530850.559:16428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530850.559:16429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530850.560:16430): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77305 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530850.581:16431): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.581:16432): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530850.597:16433): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530850.597:16434): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530850.598:16435): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530850.632:16436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.632:16437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530850.643:16438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530850.643:16439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530850.644:16440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530850.665:16441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.665:16442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530850.677:16443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530850.677:16444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530850.678:16445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530850.732:16446): pid=77389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530850.732:16447): pid=77389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666D66787770656272617469776F656271717A75676E6771687562756A75786B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835302E353530353132362D37353839312D3235363435333334383032363233332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530850.732:16448): pid=77389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530850.734:16449): pid=77389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530850.911:16450): pid=77389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530850.912:16451): pid=77389 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530850.914:16452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.916:16453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530850.927:16454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530850.928:16455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530850.929:16456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530850.950:16457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530850.950:16458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530851.162:16459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530851.162:16460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530851.163:16461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77453 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530851.181:16462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530851.181:16463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530851.192:16464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530851.192:16465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530851.193:16466): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77467 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530851.219:16467): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530851.219:16468): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530851.237:16469): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530851.237:16470): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530851.238:16471): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77488 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530851.272:16472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530851.272:16473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530851.284:16474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530851.284:16475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530851.285:16476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77505 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530851.311:16477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530851.311:16478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530851.324:16479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530851.324:16480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530851.325:16481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77520 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530851.386:16482): pid=77535 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530851.386:16483): pid=77535 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78707172687967756E6363647669697467766776616978666B66736B736F656D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835312E313833333036372D37353839312D32323139303635313936313834342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530851.386:16484): pid=77535 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530851.390:16485): pid=77535 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530851.551:16486): pid=77535 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530851.551:16487): pid=77535 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530851.556:16488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530851.556:16489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530851.566:16490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530851.566:16491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530851.567:16492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77559 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530851.596:16493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530851.596:16494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530851.865:16495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530851.865:16496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530851.870:16497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77605 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530851.895:16498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530851.895:16499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530851.904:16500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530851.904:16501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530851.905:16502): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77630 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530851.946:16503): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530851.946:16504): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530851.962:16505): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530851.962:16506): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530851.963:16507): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530852.007:16508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530852.007:16509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530852.020:16510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530852.020:16511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530852.020:16512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77681 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530852.049:16513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530852.049:16514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530852.060:16515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530852.060:16516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530852.062:16517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77711 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530852.125:16518): pid=77737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530852.125:16519): pid=77737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65656A6C7A736D6966696E7469716B7674636A6C617468656978796774617468203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835312E383937303733372D37353839312D36303234373837343335373834352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530852.126:16520): pid=77737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530852.128:16521): pid=77737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530852.291:16522): pid=77737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530852.292:16523): pid=77737 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530852.295:16524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530852.295:16525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530852.305:16526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530852.305:16527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530852.306:16528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77779 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530852.333:16529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530852.333:16530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530852.561:16531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530852.561:16532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530852.562:16533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530852.586:16534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530852.586:16535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530852.599:16536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530852.599:16537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530852.601:16538): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530852.639:16539): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530852.639:16540): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530852.654:16541): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530852.654:16542): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530852.655:16543): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77852 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530852.713:16544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530852.713:16545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530852.728:16546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530852.728:16547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530852.731:16548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77866 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530852.770:16549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530852.770:16550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530852.784:16551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530852.784:16552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530852.788:16553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77881 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530852.879:16554): pid=77899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530852.879:16555): pid=77899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77636479726C6E637277647171666E7673737275706B7567616B6D666B68626F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835322E3538373638362D37353839312D31313738383435393239353835392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530852.880:16556): pid=77899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530852.882:16557): pid=77899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530853.062:16558): pid=77899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530853.063:16559): pid=77899 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530853.065:16560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530853.065:16561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530853.077:16562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530853.077:16563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530853.078:16564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77905 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530853.111:16565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530853.111:16566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530853.322:16567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530853.323:16568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530853.324:16569): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77920 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530853.341:16570): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530853.341:16571): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530853.350:16572): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530853.350:16573): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530853.351:16574): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530853.390:16575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530853.390:16576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530853.424:16577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530853.424:16578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530853.425:16579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77971 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530853.472:16580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530853.472:16581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530853.484:16582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530853.484:16583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530853.485:16584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=77994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530853.530:16585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530853.530:16586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530853.537:16587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530853.537:16588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530853.538:16589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78012 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530853.609:16590): pid=78032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530853.610:16591): pid=78032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B7667727971716875686D68656F65616E65736B66617165736D6E66706178203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835332E333432333933392D37353839312D3136323033393034343734333131312F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530853.610:16592): pid=78032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530853.611:16593): pid=78032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530853.777:16594): pid=78032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530853.777:16595): pid=78032 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530853.780:16596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530853.780:16597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530853.790:16598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530853.790:16599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530853.791:16600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78088 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530853.822:16601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530853.822:16602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.019:16603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.019:16604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.023:16605): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78110 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530854.042:16606): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.042:16607): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.052:16608): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.052:16609): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.055:16610): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530854.083:16611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.083:16612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.098:16613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.098:16614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.102:16615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78145 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530854.129:16616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.129:16617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.140:16618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.140:16619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.143:16620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78159 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530854.160:16621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.160:16622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.171:16623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.171:16624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.175:16625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78174 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530854.225:16626): pid=78189 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530854.225:16627): pid=78189 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6C71726E6361747A716E65797465756F637677616A61797162726174636562203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835342E3034343536362D37353839312D32303333303239343630333131352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530854.226:16628): pid=78189 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530854.228:16629): pid=78189 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530854.414:16630): pid=78189 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530854.414:16631): pid=78189 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530854.417:16632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.417:16633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.430:16634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.430:16635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.431:16636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530854.453:16637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.453:16638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.678:16639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.681:16640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.681:16641): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78235 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530854.705:16642): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.705:16643): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.717:16644): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.717:16645): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.718:16646): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78253 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530854.740:16647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.740:16648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.757:16649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.757:16650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.758:16651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530854.809:16652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.809:16653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.823:16654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.823:16655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.824:16656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78331 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530854.864:16657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530854.864:16658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530854.876:16659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530854.876:16660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530854.880:16661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78354 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530854.969:16662): pid=78369 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530854.970:16663): pid=78369 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646E6A636C6E7665627867766B6C7276616772687A72667A7377707677616362203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835342E373037313631372D37353839312D3137393330353830333931323239302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530854.970:16664): pid=78369 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530854.975:16665): pid=78369 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530855.186:16666): pid=78369 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530855.186:16667): pid=78369 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530855.191:16668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530855.191:16669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530855.201:16670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530855.201:16671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530855.202:16672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78379 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530855.232:16673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530855.232:16674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530855.450:16675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530855.450:16676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530855.452:16677): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78396 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530855.488:16678): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530855.488:16679): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530855.497:16680): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530855.497:16681): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530855.498:16682): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530855.536:16683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530855.536:16684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530855.547:16685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530855.547:16686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530855.548:16687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78436 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530855.593:16688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530855.593:16689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530855.603:16690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530855.603:16691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530855.606:16692): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78455 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530855.643:16693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530855.643:16694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530855.654:16695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530855.654:16696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530855.655:16697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78470 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530855.728:16698): pid=78485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530855.728:16699): pid=78485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7866696E73767564627A61776B706E697A6A6574726C797375697368716F716E203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835352E3438393838372D37353839312D373834363537303534353834362F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530855.728:16700): pid=78485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530855.730:16701): pid=78485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530855.910:16702): pid=78485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530855.910:16703): pid=78485 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530855.912:16704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530855.912:16705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530855.923:16706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530855.923:16707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530855.924:16708): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78489 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530855.942:16709): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530855.942:16710): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.131:16711): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.131:16712): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.133:16713): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530856.158:16714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.158:16715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.167:16716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.167:16717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.167:16718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78518 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530856.192:16719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.192:16720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.207:16721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.207:16722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.208:16723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78539 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530856.241:16724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.241:16725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.252:16726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.252:16727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.253:16728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78558 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530856.277:16729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.277:16730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.289:16731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.289:16732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.291:16733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530856.349:16734): pid=78588 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530856.349:16735): pid=78588 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6574796A636B6F6C63626179756D616776656A65766D637A7868707A71626761203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835362E313538393831382D37353839312D3236383834323239363238363039352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530856.350:16736): pid=78588 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530856.351:16737): pid=78588 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530856.529:16738): pid=78588 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530856.529:16739): pid=78588 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530856.533:16740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.533:16741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.543:16742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.543:16743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.544:16744): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530856.563:16745): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.563:16746): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.774:16747): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.774:16748): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.777:16749): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530856.795:16750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.795:16751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.804:16752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.804:16753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.804:16754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78623 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530856.830:16755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.830:16756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.843:16757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.843:16758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.845:16759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530856.877:16760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.879:16761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.892:16762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.892:16763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.893:16764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78658 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530856.916:16765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530856.916:16766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530856.925:16767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530856.925:16768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530856.926:16769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78673 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530856.978:16770): pid=78688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530856.978:16771): pid=78688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6C636E6C73737777676B78676E7A717574747668616665716E6F76746C7466203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835362E373936363332382D37353839312D3133343035373333343333313530352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530856.979:16772): pid=78688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530856.980:16773): pid=78688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530857.140:16774): pid=78688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530857.140:16775): pid=78688 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530857.143:16776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530857.143:16777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530857.154:16778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530857.154:16779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530857.155:16780): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78692 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530857.177:16781): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530857.178:16782): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530857.408:16783): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530857.408:16784): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530857.410:16785): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530857.430:16786): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530857.430:16787): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530857.442:16788): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530857.442:16789): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530857.443:16790): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78722 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530857.465:16791): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530857.465:16792): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530857.478:16793): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530857.478:16794): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530857.479:16795): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78743 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530857.508:16796): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530857.508:16797): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530857.519:16798): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530857.519:16799): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530857.520:16800): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78757 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530857.541:16801): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530857.541:16802): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530857.553:16803): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530857.553:16804): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530857.554:16805): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530857.605:16806): pid=78787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530857.606:16807): pid=78787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7677676A6B6E6E666C787362636B6F7A626866716F6C6C697977756B726B676F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835372E343335303932372D37353839312D3136343534343039323838323830392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530857.606:16808): pid=78787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530857.608:16809): pid=78787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530857.789:16810): pid=78787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530857.790:16811): pid=78787 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530857.793:16812): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530857.793:16813): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530857.805:16814): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530857.805:16815): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530857.805:16816): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78791 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530857.825:16817): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530857.825:16818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.021:16819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.021:16820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.022:16821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78806 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.045:16822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.045:16823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.054:16824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.055:16825): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.056:16826): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.080:16827): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.080:16828): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.096:16829): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.096:16830): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.097:16831): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78841 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.129:16832): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.129:16833): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.140:16834): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.140:16835): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.141:16836): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78855 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.159:16837): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.160:16838): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.170:16839): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.170:16840): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.171:16841): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78870 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530858.224:16842): pid=78885 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530858.224:16843): pid=78885 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686A636C656E67696C66726E65676C6A7664686165797472787179697A6B636D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835382E303436313631342D37353839312D3138373136313731383133353832392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530858.225:16844): pid=78885 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530858.226:16845): pid=78885 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530858.392:16846): pid=78885 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530858.393:16847): pid=78885 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530858.395:16848): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.396:16849): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.407:16850): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.407:16851): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.408:16852): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.426:16853): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.426:16854): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.614:16855): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.614:16856): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.615:16857): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78904 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.634:16858): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.634:16859): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.643:16860): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.643:16861): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.644:16862): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.665:16863): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.665:16864): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.679:16865): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.679:16866): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.680:16867): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78939 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.708:16868): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.708:16869): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.718:16870): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.718:16871): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.718:16872): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78953 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.737:16873): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.737:16874): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.747:16875): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.747:16876): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.748:16877): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78968 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530858.801:16878): pid=78983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530858.802:16879): pid=78983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6262656E6C756E7076707A736B7064796D65636F786E617873746E63676D7176203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835382E363335383130392D37353839312D353933383131363739323739322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530858.802:16880): pid=78983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530858.803:16881): pid=78983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530858.959:16882): pid=78983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530858.959:16883): pid=78983 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530858.962:16884): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.962:16885): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530858.972:16886): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530858.972:16887): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530858.973:16888): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=78987 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530858.991:16889): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530858.991:16890): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.209:16891): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.209:16892): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.210:16893): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79002 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530859.228:16894): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.228:16895): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.238:16896): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.239:16897): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.239:16898): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79016 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530859.262:16899): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.263:16900): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.278:16901): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.278:16902): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.279:16903): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79037 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530859.308:16904): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.309:16905): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.320:16906): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.320:16907): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.321:16908): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79051 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530859.342:16909): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.342:16910): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.353:16911): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.353:16912): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.354:16913): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79066 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530859.411:16914): pid=79081 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530859.411:16915): pid=79081 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D746C766C766E746A656D716373706F6D656276756A786D6261756376687072203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835392E323330303637372D37353839312D33303434373837303032393734392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530859.411:16916): pid=79081 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530859.413:16917): pid=79081 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530859.585:16918): pid=79081 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530859.585:16919): pid=79081 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530859.588:16920): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.588:16921): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.598:16922): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.598:16923): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.599:16924): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79085 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530859.620:16925): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.620:16926): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.820:16927): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.820:16928): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.821:16929): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79100 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530859.844:16930): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.848:16931): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.855:16932): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.855:16933): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.856:16934): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530859.878:16935): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.878:16936): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.894:16937): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.894:16938): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.895:16939): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530859.922:16940): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.922:16941): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.933:16942): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.933:16943): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.934:16944): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79149 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530859.952:16945): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530859.952:16946): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530859.962:16947): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530859.962:16948): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530859.963:16949): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79164 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530860.015:16950): pid=79179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530860.015:16951): pid=79179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6179797A697462746C656371796166737869636F6F65776E76757877756E6F203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303835392E383436353933312D37353839312D36303133393936343630343533392F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530860.016:16952): pid=79179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530860.017:16953): pid=79179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530860.183:16954): pid=79179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530860.183:16955): pid=79179 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530860.185:16956): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530860.185:16957): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530860.195:16958): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530860.195:16959): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530860.196:16960): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79183 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530860.222:16961): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530860.222:16962): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530860.465:16963): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530860.465:16964): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530860.466:16965): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530860.484:16966): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530860.485:16967): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530860.494:16968): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530860.494:16969): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530860.495:16970): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79214 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530860.516:16971): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530860.516:16972): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530860.530:16973): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530860.530:16974): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530860.531:16975): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79235 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530860.561:16976): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530860.561:16977): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530860.572:16978): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530860.572:16979): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530860.573:16980): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79249 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530860.592:16981): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530860.593:16982): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530860.611:16983): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530860.611:16984): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530860.613:16985): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79264 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530860.676:16986): pid=79279 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530860.677:16987): pid=79279 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776E646D756B6C63766F6F76747A6F6B79776E6C646C786978796A756E626D6B203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836302E343836363430372D37353839312D3134393031343030313434363536352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530860.677:16988): pid=79279 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530860.679:16989): pid=79279 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530860.856:16990): pid=79279 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530860.857:16991): pid=79279 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530860.859:16992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530860.859:16993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530860.870:16994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530860.870:16995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530860.871:16996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530860.894:16997): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530860.894:16998): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.316:16999): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.316:17000): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.317:17001): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530861.337:17002): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530861.337:17003): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.348:17004): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.348:17005): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.349:17006): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79317 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530861.373:17007): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530861.373:17008): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.431:17009): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.431:17010): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.432:17011): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79338 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530861.460:17012): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530861.460:17013): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.473:17014): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.473:17015): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.474:17016): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530861.500:17017): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530861.500:17018): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.517:17019): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.517:17020): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.518:17021): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79367 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530861.570:17022): pid=79382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530861.570:17023): pid=79382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67696E78766D647365687471616A6D656F6B6772776A6D6D7566766862616A64203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836312E333339313932392D37393330312D3133383135393133333430363035332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530861.571:17024): pid=79382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530861.573:17025): pid=79382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530861.719:17026): pid=79382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530861.720:17027): pid=79382 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530861.722:17028): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530861.722:17029): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.740:17030): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.741:17031): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.742:17032): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79392 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530861.766:17033): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530861.766:17034): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.778:17035): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.778:17036): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.779:17037): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79416 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530861.807:17038): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530861.807:17039): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.823:17040): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.823:17041): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.824:17042): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79437 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530861.860:17043): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530861.860:17044): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.872:17045): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.872:17046): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.873:17047): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79465 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530861.895:17048): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530861.895:17049): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530861.903:17050): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530861.903:17051): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530861.904:17052): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79492 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530861.955:17053): pid=79507 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530861.955:17054): pid=79507 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B706B757A726E667A6F77716C7676726579746678676C6F7979746D75676967203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836312E333339313932392D37393330312D3133383135393133333430363035332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530861.955:17055): pid=79507 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530861.957:17056): pid=79507 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530862.135:17057): pid=79507 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530862.135:17058): pid=79507 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530862.138:17059): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530862.139:17060): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530862.149:17061): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530862.149:17062): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530862.150:17063): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530862.170:17064): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530862.171:17065): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530862.384:17066): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530862.385:17067): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530862.385:17068): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79528 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530862.406:17069): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530862.407:17070): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530862.416:17071): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530862.416:17072): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530862.416:17073): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530862.438:17074): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530862.438:17075): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530862.454:17076): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530862.454:17077): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530862.455:17078): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79563 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530862.489:17079): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530862.489:17080): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530862.499:17081): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530862.499:17082): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530862.499:17083): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79577 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530862.517:17084): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530862.517:17085): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530862.527:17086): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530862.527:17087): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530862.528:17088): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530862.578:17089): pid=79607 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530862.578:17090): pid=79607 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530862.578:17091): pid=79607 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530862.580:17092): pid=79607 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530863.252:17093): prog-id=481 op=LOAD
type=SYSCALL msg=audit(1748530863.252:17093): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001cfc48 a2=90 a3=0 items=0 ppid=79643 pid=79654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530863.252:17093): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38316239376138373733353034333639336638393736656439
type=BPF msg=audit(1748530863.252:17094): prog-id=482 op=LOAD
type=SYSCALL msg=audit(1748530863.252:17094): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001cf9d8 a2=90 a3=0 items=0 ppid=79643 pid=79654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530863.252:17094): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38316239376138373733353034333639336638393736656439
type=BPF msg=audit(1748530863.252:17095): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530863.252:17096): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530863.252:17097): prog-id=483 op=LOAD
type=SYSCALL msg=audit(1748530863.252:17097): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001cfeb0 a2=90 a3=0 items=0 ppid=79643 pid=79654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530863.252:17097): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38316239376138373733353034333639336638393736656439
type=BPF msg=audit(1748530863.403:17098): prog-id=484 op=LOAD
type=BPF msg=audit(1748530863.404:17099): prog-id=485 op=LOAD
type=SYSCALL msg=audit(1748530863.404:17099): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=79751 pid=79772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530863.404:17099): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33386333663263613066343937636535636333316562343261
type=BPF msg=audit(1748530863.404:17100): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530863.404:17101): prog-id=486 op=LOAD
type=SYSCALL msg=audit(1748530863.404:17101): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=79751 pid=79772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530863.404:17101): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33386333663263613066343937636535636333316562343261
type=BPF msg=audit(1748530863.404:17102): prog-id=487 op=LOAD
type=SYSCALL msg=audit(1748530863.404:17102): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=79751 pid=79772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530863.404:17102): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33386333663263613066343937636535636333316562343261
type=BPF msg=audit(1748530863.404:17103): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530863.404:17104): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530863.404:17105): prog-id=488 op=LOAD
type=SYSCALL msg=audit(1748530863.404:17105): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=79751 pid=79772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530863.404:17105): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33386333663263613066343937636535636333316562343261
type=USER_END msg=audit(1748530863.504:17106): pid=79607 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530863.505:17107): pid=79607 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530863.507:17108): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530863.507:17109): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530863.518:17110): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530863.518:17111): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530863.519:17112): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=79943 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530863.539:17113): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530863.539:17114): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=BPF msg=audit(1748530863.728:17115): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1748530864.115:17116): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530864.116:17117): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530864.116:17118): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530864.134:17119): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530864.134:17120): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530864.144:17121): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530864.144:17122): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530864.145:17123): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80177 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530864.166:17124): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530864.166:17125): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530864.180:17126): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530864.180:17127): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530864.181:17128): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530864.218:17129): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530864.218:17130): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530864.229:17131): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530864.230:17132): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530864.231:17133): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80212 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530864.249:17134): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530864.249:17135): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530864.260:17136): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530864.260:17137): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530864.261:17138): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80227 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530864.314:17139): pid=80242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530864.314:17140): pid=80242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7167716E656E626F687769677A776E6F7A637A6267747A786D71667461776C71203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836342E3133363339372D38303133312D38343431363230323038303134342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530864.315:17141): pid=80242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530864.317:17142): pid=80242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530865.165:17143): pid=80242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530865.165:17144): pid=80242 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530865.167:17145): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530865.168:17146): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530865.178:17147): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530865.178:17148): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530865.179:17149): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80274 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530865.200:17150): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530865.201:17151): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530865.423:17152): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530865.423:17153): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530865.424:17154): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80293 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530865.441:17155): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530865.441:17156): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530865.451:17157): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530865.451:17158): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530865.455:17159): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530865.475:17160): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530865.475:17161): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530865.490:17162): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530865.490:17163): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530865.491:17164): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80328 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530865.529:17165): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530865.529:17166): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530865.540:17167): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530865.540:17168): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530865.541:17169): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80342 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530865.559:17170): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530865.559:17171): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530865.569:17172): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530865.570:17173): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530865.571:17174): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530865.620:17175): pid=80372 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530865.620:17176): pid=80372 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7262667372737170626D746264686D616561706763736C7A6D646F786B686671203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836352E343433353739372D38303238392D3133343738393335313839303530302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530865.620:17177): pid=80372 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530865.623:17178): pid=80372 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530865.813:17179): pid=80372 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530865.813:17180): pid=80372 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530865.816:17181): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530865.816:17182): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530865.826:17183): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530865.826:17184): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530865.827:17185): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80376 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530865.848:17186): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530865.848:17187): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.065:17188): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.065:17189): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.066:17190): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80397 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530866.084:17191): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.085:17192): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.095:17193): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.095:17194): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.096:17195): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530866.117:17196): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.117:17197): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.218:17198): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.218:17199): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.219:17200): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80432 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530866.247:17201): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.247:17202): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.259:17203): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.259:17204): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.260:17205): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80446 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530866.278:17206): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.278:17207): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.289:17208): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.289:17209): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.290:17210): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80461 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530866.342:17211): pid=80476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530866.342:17212): pid=80476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69727A7272796177766774627064636B756F7369647978717971717A647A6F7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836362E303836373431372D38303339312D3130353935373634373238373635382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530866.343:17213): pid=80476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530866.345:17214): pid=80476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530866.497:17215): pid=80476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530866.497:17216): pid=80476 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530866.499:17217): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.501:17218): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.516:17219): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.516:17220): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.517:17221): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80481 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530866.538:17222): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.538:17223): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.548:17224): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.548:17225): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.549:17226): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80495 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530866.569:17227): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.569:17228): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.584:17229): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.584:17230): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.585:17231): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530866.613:17232): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.614:17233): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.625:17234): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.625:17235): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.626:17236): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80525 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530866.644:17237): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.645:17238): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.665:17239): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.665:17240): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.666:17241): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80540 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530866.718:17242): pid=80555 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530866.718:17243): pid=80555 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6364677269636C767674716A646E6F6E62686E7378676E6964616A706D6978203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836362E303836373431372D38303339312D3130353935373634373238373635382F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530866.718:17244): pid=80555 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530866.720:17245): pid=80555 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530866.886:17246): pid=80555 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530866.886:17247): pid=80555 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530866.888:17248): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.889:17249): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530866.899:17250): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530866.899:17251): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530866.900:17252): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80559 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530866.921:17253): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530866.921:17254): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530867.144:17255): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530867.144:17256): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530867.145:17257): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530867.164:17258): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530867.164:17259): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530867.174:17260): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530867.174:17261): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530867.175:17262): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530867.199:17263): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530867.199:17264): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530867.214:17265): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530867.214:17266): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530867.216:17267): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80611 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530867.254:17268): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530867.254:17269): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530867.266:17270): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530867.266:17271): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530867.267:17272): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80625 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530867.286:17273): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530867.286:17274): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530867.297:17275): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530867.297:17276): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530867.298:17277): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80640 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530867.351:17278): pid=80655 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530867.352:17279): pid=80655 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666175666E67626B657063786E7A6B68716E746175737265636C74756D727376203B2068747470735F70726F78793D272720687474705F70726F78793D272720444F434B45525F434C49454E545F54494D454F55543D31323020434F4D504F53455F485454505F54494D454F55543D313230202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836372E313635383631382D38303537342D3135313538373935313036313236382F416E736962616C6C5A5F646F636B65725F636F6D706F73652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530867.352:17280): pid=80655 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530867.353:17281): pid=80655 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530867.969:17282): prog-id=489 op=LOAD
type=BPF msg=audit(1748530867.969:17283): prog-id=490 op=LOAD
type=SYSCALL msg=audit(1748530867.969:17283): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=80691 pid=80701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530867.969:17283): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343362313764383561646234313534373331373837373637
type=BPF msg=audit(1748530867.970:17284): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530867.970:17285): prog-id=491 op=LOAD
type=SYSCALL msg=audit(1748530867.970:17285): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=80691 pid=80701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530867.970:17285): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343362313764383561646234313534373331373837373637
type=BPF msg=audit(1748530867.970:17286): prog-id=492 op=LOAD
type=SYSCALL msg=audit(1748530867.970:17286): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=80691 pid=80701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530867.970:17286): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343362313764383561646234313534373331373837373637
type=BPF msg=audit(1748530867.970:17287): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530867.970:17288): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530867.970:17289): prog-id=493 op=LOAD
type=SYSCALL msg=audit(1748530867.970:17289): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=80691 pid=80701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530867.970:17289): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343362313764383561646234313534373331373837373637
type=USER_END msg=audit(1748530868.063:17290): pid=80655 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530868.063:17291): pid=80655 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530868.067:17292): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530868.068:17293): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530868.081:17294): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530868.081:17295): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530868.082:17296): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80770 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530868.106:17297): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530868.107:17298): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530868.932:17299): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530868.932:17300): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530868.933:17301): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80847 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530868.953:17302): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530868.953:17303): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530868.970:17304): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530868.970:17305): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530868.972:17306): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80861 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530869.032:17307): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530869.032:17308): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530869.054:17309): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530869.054:17310): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530869.055:17311): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80884 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530869.104:17312): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530869.104:17313): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530869.113:17314): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530869.113:17315): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530869.115:17316): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80898 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530869.141:17317): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530869.141:17318): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530869.151:17319): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530869.151:17320): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530869.154:17321): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80913 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530869.216:17322): pid=80928 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530869.217:17323): pid=80928 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716379776C686C6277756F696B776E6E726B6A6371686C766C716E65797A716D203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836382E3935373330342D38303831372D3134353139393039343333363036312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530869.217:17324): pid=80928 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530869.219:17325): pid=80928 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530869.502:17326): pid=80928 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530869.503:17327): pid=80928 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530869.505:17328): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530869.506:17329): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530869.516:17330): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530869.516:17331): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530869.517:17332): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80942 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530869.535:17333): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530869.535:17334): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530869.774:17335): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530869.774:17336): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530869.775:17337): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80958 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530869.793:17338): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530869.793:17339): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530869.803:17340): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530869.803:17341): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530869.804:17342): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80972 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530869.828:17343): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530869.828:17344): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530869.844:17345): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530869.844:17346): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530869.847:17347): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=80993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530869.886:17348): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530869.886:17349): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530869.898:17350): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530869.898:17351): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530869.899:17352): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81007 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530869.918:17353): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530869.918:17354): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530869.929:17355): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530869.929:17356): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530869.930:17357): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81022 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530869.991:17358): pid=81037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530869.991:17359): pid=81037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7867716B707876626B61637A737566787669727563626A786F616466797968203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303836392E373934373235342D38303831372D32323037363030353238393032382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530869.991:17360): pid=81037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530869.996:17361): pid=81037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530870.300:17362): pid=81037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530870.301:17363): pid=81037 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530870.305:17364): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530870.307:17365): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530870.317:17366): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530870.317:17367): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530870.319:17368): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530870.338:17369): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530870.339:17370): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530870.581:17371): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530870.581:17372): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530870.582:17373): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81065 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530870.603:17374): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530870.603:17375): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530870.612:17376): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530870.612:17377): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530870.613:17378): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81079 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530870.636:17379): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530870.636:17380): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530870.652:17381): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530870.652:17382): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530870.653:17383): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81100 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530870.687:17384): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530870.687:17385): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530870.699:17386): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530870.699:17387): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530870.701:17388): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530870.724:17389): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530870.724:17390): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530870.736:17391): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530870.736:17392): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530870.737:17393): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81129 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530870.788:17394): pid=81144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530870.788:17395): pid=81144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78696C6677796B75616768687A63757968696E6A63786368636A796F6B627277203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303837302E363034313739312D38303831372D32343431353239363932313038392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530870.789:17396): pid=81144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530870.791:17397): pid=81144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530871.089:17398): pid=81144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530871.089:17399): pid=81144 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530871.091:17400): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530871.092:17401): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530871.104:17402): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530871.104:17403): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530871.105:17404): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81156 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530871.126:17405): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530871.126:17406): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530871.394:17407): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530871.394:17408): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530871.397:17409): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81171 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530871.416:17410): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530871.416:17411): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530871.426:17412): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530871.426:17413): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530871.427:17414): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81186 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530871.448:17415): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530871.449:17416): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530871.462:17417): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530871.462:17418): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530871.464:17419): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81207 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530871.495:17420): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530871.495:17421): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530871.504:17422): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530871.505:17423): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530871.506:17424): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81221 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530871.539:17425): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530871.539:17426): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530871.550:17427): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530871.550:17428): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530871.551:17429): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81236 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530871.602:17430): pid=81251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530871.603:17431): pid=81251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75706E6A6C7A7A78757A6E6A76726370706271646F63766169667871636E7770203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303837312E343138323636382D38303831372D36353439313934393732373233312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530871.603:17432): pid=81251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530871.605:17433): pid=81251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530920.397:17434): pid=81251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530920.397:17435): pid=81251 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530920.400:17436): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530920.400:17437): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530920.417:17438): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530920.417:17439): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530920.418:17440): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81840 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530920.442:17441): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530920.442:17442): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530920.704:17443): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530920.704:17444): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530920.705:17445): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81855 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530920.725:17446): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530920.725:17447): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530920.735:17448): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530920.735:17449): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530920.736:17450): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530920.758:17451): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530920.758:17452): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530920.775:17453): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530920.775:17454): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530920.776:17455): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81890 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530920.804:17456): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530920.804:17457): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530920.816:17458): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530920.816:17459): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530920.817:17460): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81904 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530920.837:17461): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530920.838:17462): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530920.850:17463): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530920.850:17464): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530920.851:17465): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=81919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530920.905:17466): pid=81934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530920.905:17467): pid=81934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E636A736A737A776B6F646C6A6C746F61647979616E777972786B7972676D7A203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303932302E3732373333382D38303831372D3133373033303438373532313232322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530920.906:17468): pid=81934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530920.908:17469): pid=81934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530932.908:17470): pid=81934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530932.909:17471): pid=81934 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530932.911:17472): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530932.911:17473): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530932.923:17474): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530932.923:17475): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530932.924:17476): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82058 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530932.944:17477): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530932.944:17478): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530933.420:17479): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530933.420:17480): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530933.420:17481): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82078 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530933.439:17482): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530933.439:17483): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530933.448:17484): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530933.448:17485): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530933.449:17486): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82092 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530933.473:17487): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530933.473:17488): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530933.489:17489): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530933.489:17490): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530933.490:17491): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530933.520:17492): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530933.520:17493): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530933.531:17494): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530933.531:17495): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530933.532:17496): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82127 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530933.552:17497): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530933.552:17498): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530933.564:17499): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530933.564:17500): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530933.565:17501): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82142 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530933.632:17502): pid=82157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530933.632:17503): pid=82157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757563776E696969767776716275706F69727A717764646B6762706679756F62203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303933332E343430353133342D38323037362D32333632323638333636303833342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530933.632:17504): pid=82157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530933.639:17505): pid=82157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530933.823:17506): pid=82157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530933.823:17507): pid=82157 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530933.826:17508): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530933.827:17509): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530933.838:17510): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530933.838:17511): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530933.839:17512): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82161 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530933.867:17513): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530933.867:17514): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.407:17515): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.408:17516): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.408:17517): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82190 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530934.426:17518): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530934.426:17519): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.435:17520): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.436:17521): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.436:17522): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530934.458:17523): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530934.458:17524): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.519:17525): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.519:17526): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.520:17527): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82225 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530934.549:17528): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530934.549:17529): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.560:17530): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.560:17531): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.561:17532): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82239 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530934.579:17533): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530934.579:17534): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.589:17535): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.590:17536): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.591:17537): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530934.647:17538): pid=82269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530934.647:17539): pid=82269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7A777871676162777376756266666C7671687469626B7968776569766C6575203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303933342E3432383033372D38323138382D35343537363635343332313831382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530934.647:17540): pid=82269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530934.649:17541): pid=82269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530934.806:17542): pid=82269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530934.806:17543): pid=82269 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530934.809:17544): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530934.810:17545): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.824:17546): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.825:17547): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.826:17548): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82274 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530934.847:17549): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530934.848:17550): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.859:17551): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.859:17552): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.860:17553): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530934.879:17554): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530934.879:17555): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.894:17556): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.894:17557): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.895:17558): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82304 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530934.927:17559): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530934.927:17560): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.940:17561): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.940:17562): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.941:17563): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82318 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530934.960:17564): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530934.960:17565): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530934.971:17566): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530934.972:17567): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530934.973:17568): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82333 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530935.040:17569): pid=82348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530935.040:17570): pid=82348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666F79737276796865786876766E706379796A7977736D6D7572746573796C6C203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303933342E3432383033372D38323138382D35343537363635343332313831382F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530935.041:17571): pid=82348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530935.042:17572): pid=82348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530935.227:17573): pid=82348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530935.227:17574): pid=82348 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530935.235:17575): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530935.236:17576): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530935.247:17577): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530935.247:17578): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530935.248:17579): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82353 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530935.266:17580): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530935.266:17581): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530935.548:17582): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530935.548:17583): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530935.548:17584): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530935.567:17585): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530935.567:17586): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530935.577:17587): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530935.577:17588): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530935.578:17589): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530935.606:17590): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530935.607:17591): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530935.623:17592): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530935.623:17593): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530935.623:17594): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82409 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530935.653:17595): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530935.653:17596): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530935.665:17597): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530935.665:17598): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530935.666:17599): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82423 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530935.687:17600): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530935.687:17601): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530935.699:17602): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530935.699:17603): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530935.700:17604): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82438 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530935.759:17605): pid=82453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530935.759:17606): pid=82453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E657373726F6B786565766F7070726F646A676B707477646D6D62626B6A7779203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303933352E353638373735372D38323337322D3235363733313436303234373834302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530935.760:17607): pid=82453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530935.761:17608): pid=82453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530935.942:17609): pid=82453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530935.942:17610): pid=82453 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530935.944:17611): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530935.946:17612): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530935.956:17613): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530935.956:17614): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530935.957:17615): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82457 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530935.976:17616): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530935.976:17617): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530936.548:17618): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530936.548:17619): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530936.549:17620): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82482 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530936.566:17621): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530936.566:17622): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530936.576:17623): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530936.576:17624): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530936.577:17625): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530936.598:17626): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530936.599:17627): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530936.613:17628): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530936.613:17629): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530936.614:17630): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82517 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530936.644:17631): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530936.644:17632): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530936.657:17633): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530936.657:17634): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530936.658:17635): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530936.677:17636): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530936.677:17637): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530936.687:17638): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530936.687:17639): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530936.689:17640): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82546 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530936.745:17641): pid=82561 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530936.746:17642): pid=82561 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6367777074786C6D776C68796B64697474766F676C6B766175626E75727A7177203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303933362E3536383335382D38323438302D3136353933383933373436363432312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530936.746:17643): pid=82561 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530936.748:17644): pid=82561 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530936.894:17645): pid=82561 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530936.895:17646): pid=82561 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530936.897:17647): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530936.898:17648): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530936.907:17649): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530936.908:17650): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530936.909:17651): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82565 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530936.928:17652): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530936.928:17653): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530937.412:17654): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530937.412:17655): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530937.413:17656): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530937.432:17657): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530937.432:17658): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530937.447:17659): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530937.447:17660): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530937.448:17661): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530937.472:17662): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530937.472:17663): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530937.599:17664): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530937.600:17665): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530937.600:17666): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82625 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530937.632:17667): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530937.632:17668): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530937.645:17669): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530937.645:17670): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530937.646:17671): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530937.667:17672): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530937.667:17673): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530937.678:17674): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530937.678:17675): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530937.679:17676): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82654 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530937.734:17677): pid=82669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530937.734:17678): pid=82669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767A78657969686D6B696E6B63677477786B667A7276697A637463766F647176203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303933372E343334303231372D38323538382D3139303130343635363835373133322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530937.735:17679): pid=82669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530937.737:17680): pid=82669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530937.909:17681): pid=82669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530937.909:17682): pid=82669 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530937.912:17683): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530937.912:17684): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530937.927:17685): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530937.928:17686): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530937.928:17687): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530937.949:17688): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530937.949:17689): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530937.963:17690): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530937.963:17691): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530937.964:17692): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82688 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530937.992:17693): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530937.992:17694): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530938.008:17695): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530938.008:17696): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530938.009:17697): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82704 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530938.039:17698): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530938.039:17699): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530938.050:17700): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530938.050:17701): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530938.051:17702): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530938.071:17703): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530938.071:17704): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530938.082:17705): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530938.082:17706): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530938.083:17707): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82733 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530938.141:17708): pid=82748 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530938.141:17709): pid=82748 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A746A6E657572716E6C7A6668706F6C7365646B64637471626F7066747779203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303933372E343334303231372D38323538382D3139303130343635363835373133322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530938.142:17710): pid=82748 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530938.144:17711): pid=82748 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530938.344:17712): pid=82748 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530938.344:17713): pid=82748 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530938.347:17714): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530938.349:17715): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530938.361:17716): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530938.361:17717): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530938.362:17718): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82752 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530938.385:17719): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530938.385:17720): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530938.652:17721): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530938.652:17722): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530938.653:17723): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82769 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530938.672:17724): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530938.673:17725): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530938.685:17726): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530938.685:17727): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530938.686:17728): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82783 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530938.716:17729): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530938.716:17730): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530938.734:17731): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530938.734:17732): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530938.735:17733): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82804 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530938.766:17734): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530938.766:17735): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530938.780:17736): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530938.780:17737): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530938.781:17738): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530938.802:17739): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530938.802:17740): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530938.813:17741): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530938.813:17742): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530938.814:17743): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82833 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530938.867:17744): pid=82848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530938.868:17745): pid=82848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706565656E636976677A647365797061737A726C707673686770646466726874203B2068747470735F70726F78793D272720687474705F70726F78793D2727202F7573722F62696E2F707974686F6E332E39202F686F6D652F726F636B792F2E616E7369626C652F746D702F616E7369626C652D746D702D313734383533303933382E36373437352D38323736372D39353937393238303932343532362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530938.868:17746): pid=82848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530938.869:17747): pid=82848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530939.053:17748): pid=82848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530939.053:17749): pid=82848 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530939.056:17750): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530939.056:17751): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530939.068:17752): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530939.068:17753): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530939.069:17754): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82852 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530939.089:17755): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530939.089:17756): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530939.368:17757): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530939.368:17758): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530939.371:17759): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530939.392:17760): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530939.392:17761): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530939.402:17762): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530939.402:17763): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530939.403:17764): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530939.435:17765): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530939.435:17766): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530939.452:17767): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530939.452:17768): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530939.453:17769): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82904 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530939.498:17770): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530939.498:17771): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530939.514:17772): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530939.514:17773): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530939.515:17774): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530939.550:17775): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530939.550:17776): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530939.566:17777): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530939.566:17778): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530939.567:17779): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=82933 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530939.640:17780): pid=82948 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530939.640:17781): pid=82948 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530939.640:17782): pid=82948 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530939.646:17783): pid=82948 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530941.893:17784): prog-id=494 op=LOAD
type=SYSCALL msg=audit(1748530941.893:17784): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=82983 pid=82995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530941.893:17784): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65623838383463373265336165356335633664633733363963
type=BPF msg=audit(1748530941.893:17785): prog-id=495 op=LOAD
type=SYSCALL msg=audit(1748530941.893:17785): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=82983 pid=82995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530941.893:17785): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65623838383463373265336165356335633664633733363963
type=BPF msg=audit(1748530941.893:17786): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530941.893:17787): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530941.893:17788): prog-id=496 op=LOAD
type=SYSCALL msg=audit(1748530941.893:17788): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=82983 pid=82995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530941.893:17788): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65623838383463373265336165356335633664633733363963
type=BPF msg=audit(1748530942.241:17789): prog-id=497 op=LOAD
type=BPF msg=audit(1748530942.242:17790): prog-id=498 op=LOAD
type=SYSCALL msg=audit(1748530942.242:17790): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239ad0 a2=90 a3=0 items=0 ppid=83192 pid=83212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.242:17790): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33666566613531313965616164393464326131636661343231
type=BPF msg=audit(1748530942.242:17791): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.242:17792): prog-id=499 op=LOAD
type=SYSCALL msg=audit(1748530942.242:17792): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239c48 a2=90 a3=0 items=0 ppid=83192 pid=83212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.242:17792): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33666566613531313965616164393464326131636661343231
type=BPF msg=audit(1748530942.242:17793): prog-id=500 op=LOAD
type=SYSCALL msg=audit(1748530942.242:17793): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c0002399d8 a2=90 a3=0 items=0 ppid=83192 pid=83212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.242:17793): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33666566613531313965616164393464326131636661343231
type=BPF msg=audit(1748530942.242:17794): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.242:17795): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.242:17796): prog-id=501 op=LOAD
type=SYSCALL msg=audit(1748530942.242:17796): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000239eb0 a2=90 a3=0 items=0 ppid=83192 pid=83212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.242:17796): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33666566613531313965616164393464326131636661343231
type=BPF msg=audit(1748530942.287:17797): prog-id=502 op=LOAD
type=BPF msg=audit(1748530942.291:17798): prog-id=503 op=LOAD
type=SYSCALL msg=audit(1748530942.291:17798): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bad0 a2=90 a3=0 items=0 ppid=83255 pid=83291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.291:17798): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363836353738323263366464356261373364333133373438
type=BPF msg=audit(1748530942.291:17799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.291:17800): prog-id=504 op=LOAD
type=SYSCALL msg=audit(1748530942.291:17800): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011bc48 a2=90 a3=0 items=0 ppid=83255 pid=83291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.291:17800): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363836353738323263366464356261373364333133373438
type=BPF msg=audit(1748530942.291:17801): prog-id=505 op=LOAD
type=SYSCALL msg=audit(1748530942.291:17801): arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=c00011b9d8 a2=90 a3=0 items=0 ppid=83255 pid=83291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.291:17801): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363836353738323263366464356261373364333133373438
type=BPF msg=audit(1748530942.291:17802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.291:17803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.291:17804): prog-id=506 op=LOAD
type=SYSCALL msg=audit(1748530942.291:17804): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011beb0 a2=90 a3=0 items=0 ppid=83255 pid=83291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.291:17804): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363836353738323263366464356261373364333133373438
type=BPF msg=audit(1748530942.366:17805): prog-id=507 op=LOAD
type=SYSCALL msg=audit(1748530942.366:17805): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023fc48 a2=90 a3=0 items=0 ppid=83293 pid=83342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.366:17805): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653038396330663361376266383966386538313131343430
type=BPF msg=audit(1748530942.367:17806): prog-id=508 op=LOAD
type=SYSCALL msg=audit(1748530942.367:17806): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00023f9d8 a2=90 a3=0 items=0 ppid=83293 pid=83342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.367:17806): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653038396330663361376266383966386538313131343430
type=BPF msg=audit(1748530942.368:17807): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.368:17808): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.368:17809): prog-id=509 op=LOAD
type=SYSCALL msg=audit(1748530942.368:17809): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023feb0 a2=90 a3=0 items=0 ppid=83293 pid=83342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.368:17809): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653038396330663361376266383966386538313131343430
type=BPF msg=audit(1748530942.540:17810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.649:17811): prog-id=510 op=LOAD
type=SYSCALL msg=audit(1748530942.649:17811): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000241c48 a2=90 a3=0 items=0 ppid=83706 pid=83751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.649:17811): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530942.649:17812): prog-id=511 op=LOAD
type=SYSCALL msg=audit(1748530942.649:17812): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0002419d8 a2=90 a3=0 items=0 ppid=83706 pid=83751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.649:17812): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530942.649:17813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.649:17814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530942.649:17815): prog-id=512 op=LOAD
type=SYSCALL msg=audit(1748530942.649:17815): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000241eb0 a2=90 a3=0 items=0 ppid=83706 pid=83751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530942.649:17815): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=USER_END msg=audit(1748530942.752:17816): pid=82948 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530942.752:17817): pid=82948 uid=1000 auid=1000 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748530942.757:17818): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530942.757:17819): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748530942.769:17820): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530942.769:17821): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530942.770:17822): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83867 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530942.792:17823): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530942.792:17824): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530943.629:17825): pid=83964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748530943.632:17826): pid=83963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=83964 suid=74 rport=56452 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748530943.632:17827): pid=83963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=83964 suid=74 rport=56452 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1748530943.806:17828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1748530943.887:17829): pid=83963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530943.887:17830): pid=83963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748530943.933:17831): pid=83963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530943.936:17832): pid=83963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83964 suid=74 rport=56452 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748530943.941:17833): pid=83963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748530943.942:17834): pid=83963 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=30 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748530943.942:17834): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd7547e360 a2=4 a3=3e8 items=0 ppid=12358 pid=83963 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530943.942:17834): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748530943.950:17835): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748530944.098:17836): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530944.100:17837): pid=83968 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748530944.101:17838): pid=83968 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748530944.142:17839): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530944.142:17840): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530944.143:17841): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83969 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530944.197:17842): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83968 suid=1000 rport=56452 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530944.198:17843): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83968 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530944.201:17844): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748530944.201:17845): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748530944.202:17846): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530944.202:17847): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530944.202:17848): pid=83963 uid=0 auid=1000 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748530944.245:17849): pid=83984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748530944.249:17850): pid=83983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=83984 suid=74 rport=56468 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748530944.250:17851): pid=83983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=83984 suid=74 rport=56468 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748530944.333:17852): pid=83983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530944.333:17853): pid=83983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748530944.382:17854): pid=83983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530944.382:17855): pid=83983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83984 suid=74 rport=56468 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748530944.389:17856): pid=83983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748530944.391:17857): pid=83983 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=31 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748530944.391:17857): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdcc7d74a0 a2=4 a3=3e8 items=0 ppid=12358 pid=83983 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530944.391:17857): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748530944.399:17858): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748530944.440:17859): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530944.441:17860): pid=83987 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748530944.443:17861): pid=83987 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748530944.485:17862): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530944.485:17863): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530944.486:17864): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83991 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=BPF msg=audit(1748530944.571:17865): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530944.836:17866): prog-id=513 op=LOAD
type=SYSCALL msg=audit(1748530944.836:17866): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000241c48 a2=90 a3=0 items=0 ppid=84072 pid=84083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530944.836:17866): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530944.837:17867): prog-id=514 op=LOAD
type=SYSCALL msg=audit(1748530944.837:17867): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0002419d8 a2=90 a3=0 items=0 ppid=84072 pid=84083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530944.837:17867): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530944.837:17868): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530944.837:17869): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530944.837:17870): prog-id=515 op=LOAD
type=SYSCALL msg=audit(1748530944.837:17870): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000241eb0 a2=90 a3=0 items=0 ppid=84072 pid=84083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530944.837:17870): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530945.184:17871): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530945.546:17872): prog-id=516 op=LOAD
type=SYSCALL msg=audit(1748530945.546:17872): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012fc48 a2=90 a3=0 items=0 ppid=84277 pid=84288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530945.546:17872): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530945.546:17873): prog-id=517 op=LOAD
type=SYSCALL msg=audit(1748530945.546:17873): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c00012f9d8 a2=90 a3=0 items=0 ppid=84277 pid=84288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530945.546:17873): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530945.547:17874): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530945.547:17875): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530945.547:17876): prog-id=518 op=LOAD
type=SYSCALL msg=audit(1748530945.547:17876): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012feb0 a2=90 a3=0 items=0 ppid=84277 pid=84288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530945.547:17876): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530946.145:17877): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530946.680:17878): prog-id=519 op=LOAD
type=SYSCALL msg=audit(1748530946.680:17878): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012fc48 a2=90 a3=0 items=0 ppid=84489 pid=84500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530946.680:17878): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530946.680:17879): prog-id=520 op=LOAD
type=SYSCALL msg=audit(1748530946.680:17879): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c00012f9d8 a2=90 a3=0 items=0 ppid=84489 pid=84500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530946.680:17879): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530946.681:17880): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530946.681:17881): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530946.681:17882): prog-id=521 op=LOAD
type=SYSCALL msg=audit(1748530946.681:17882): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012feb0 a2=90 a3=0 items=0 ppid=84489 pid=84500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530946.681:17882): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530947.299:17883): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530948.282:17884): prog-id=522 op=LOAD
type=SYSCALL msg=audit(1748530948.282:17884): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012dc48 a2=90 a3=0 items=0 ppid=84685 pid=84697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530948.282:17884): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530948.283:17885): prog-id=523 op=LOAD
type=SYSCALL msg=audit(1748530948.283:17885): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c00012d9d8 a2=90 a3=0 items=0 ppid=84685 pid=84697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530948.283:17885): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530948.283:17886): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530948.283:17887): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530948.283:17888): prog-id=524 op=LOAD
type=SYSCALL msg=audit(1748530948.283:17888): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012deb0 a2=90 a3=0 items=0 ppid=84685 pid=84697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530948.283:17888): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530948.706:17889): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530950.519:17890): prog-id=525 op=LOAD
type=SYSCALL msg=audit(1748530950.519:17890): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c9c48 a2=90 a3=0 items=0 ppid=84899 pid=84909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530950.519:17890): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530950.519:17891): prog-id=526 op=LOAD
type=SYSCALL msg=audit(1748530950.519:17891): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001c99d8 a2=90 a3=0 items=0 ppid=84899 pid=84909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530950.519:17891): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530950.519:17892): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530950.519:17893): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530950.519:17894): prog-id=527 op=LOAD
type=SYSCALL msg=audit(1748530950.519:17894): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c9eb0 a2=90 a3=0 items=0 ppid=84899 pid=84909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530950.519:17894): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530950.944:17895): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530953.898:17896): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530954.309:17897): prog-id=528 op=LOAD
type=SYSCALL msg=audit(1748530954.309:17897): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001adc48 a2=90 a3=0 items=0 ppid=85139 pid=85150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530954.309:17897): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530954.309:17898): prog-id=529 op=LOAD
type=SYSCALL msg=audit(1748530954.309:17898): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001ad9d8 a2=90 a3=0 items=0 ppid=85139 pid=85150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530954.309:17898): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=BPF msg=audit(1748530954.309:17899): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530954.310:17900): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748530954.310:17901): prog-id=530 op=LOAD
type=SYSCALL msg=audit(1748530954.310:17901): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001adeb0 a2=90 a3=0 items=0 ppid=85139 pid=85150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530954.310:17901): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35326231393538656132316633613637326334316436393432
type=AVC msg=audit(1748530954.689:17902): avc:  denied  { read } for  pid=85345 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748530954.689:17902): avc:  denied  { open } for  pid=85345 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748530954.689:17902): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=5619bbf27cb0 a2=80000 a3=0 items=0 ppid=85308 pid=85345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530954.689:17902): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743100002D2D7072656669783D6E65742F697076342F6E656967682F706B743100002D2D7072656669783D6E65742F697076362F636F6E662F706B743100002D2D707265666978
type=AVC msg=audit(1748530954.689:17903): avc:  denied  { getattr } for  pid=85345 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748530954.689:17903): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f9a4efb7f35 a2=7ffdfca37010 a3=1000 items=0 ppid=85308 pid=85345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530954.689:17903): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743100002D2D7072656669783D6E65742F697076342F6E656967682F706B743100002D2D7072656669783D6E65742F697076362F636F6E662F706B743100002D2D707265666978
type=AVC msg=audit(1748530954.689:17904): avc:  denied  { ioctl } for  pid=85345 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748530954.689:17904): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffdfca37110 a3=5619bbf21000 items=0 ppid=85308 pid=85345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530954.689:17904): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743100002D2D7072656669783D6E65742F697076342F6E656967682F706B743100002D2D7072656669783D6E65742F697076362F636F6E662F706B743100002D2D707265666978
type=SERVICE_START msg=audit(1748530954.973:17905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748530957.470:17906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748530957.685:17907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=AVC msg=audit(1748530960.617:17908): avc:  denied  { read } for  pid=86145 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748530960.617:17908): avc:  denied  { open } for  pid=86145 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748530960.617:17908): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=560fc8371cb0 a2=80000 a3=0 items=0 ppid=86143 pid=86145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530960.617:17908): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743000002D2D7072656669783D6E65742F697076342F6E656967682F706B743000002D2D7072656669783D6E65742F697076362F636F6E662F706B743000002D2D707265666978
type=AVC msg=audit(1748530960.617:17909): avc:  denied  { getattr } for  pid=86145 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748530960.617:17909): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7fd0eb5b7f35 a2=7ffcfc3e1170 a3=1000 items=0 ppid=86143 pid=86145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530960.617:17909): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743000002D2D7072656669783D6E65742F697076342F6E656967682F706B743000002D2D7072656669783D6E65742F697076362F636F6E662F706B743000002D2D707265666978
type=AVC msg=audit(1748530960.618:17910): avc:  denied  { ioctl } for  pid=86145 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748530960.618:17910): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffcfc3e1270 a3=560fc836b000 items=0 ppid=86143 pid=86145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530960.618:17910): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F706B743000002D2D7072656669783D6E65742F697076342F6E656967682F706B743000002D2D7072656669783D6E65742F697076362F636F6E662F706B743000002D2D707265666978
type=CRYPTO_KEY_USER msg=audit(1748530964.573:17911): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83987 suid=1000 rport=56468 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530964.574:17912): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83987 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530964.580:17913): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748530964.581:17914): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748530964.582:17915): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530964.582:17916): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530964.582:17917): pid=83983 uid=0 auid=1000 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=83983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748530964.612:17918): pid=86267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86267 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748530964.613:17919): pid=86266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=86267 suid=74 rport=46086 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748530964.614:17920): pid=86266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=86267 suid=74 rport=46086 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748530964.720:17921): pid=86266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530964.720:17922): pid=86266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748530964.754:17923): pid=86266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530964.755:17924): pid=86266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86267 suid=74 rport=46086 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748530964.757:17925): pid=86266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748530964.758:17926): pid=86266 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=32 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748530964.758:17926): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffce89fb1d0 a2=4 a3=3e8 items=0 ppid=12358 pid=86266 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530964.758:17926): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748530964.760:17927): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748530964.783:17928): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530964.785:17929): pid=86269 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86269 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748530964.786:17930): pid=86269 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748530964.828:17931): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530964.828:17932): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530964.829:17933): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86270 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530964.870:17934): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86269 suid=1000 rport=46086 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530964.873:17935): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86269 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748530964.875:17936): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748530964.875:17937): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748530964.876:17938): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748530964.876:17939): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530964.876:17940): pid=86266 uid=0 auid=1000 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748530964.893:17941): pid=86285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86285 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748530964.893:17942): pid=86284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=86285 suid=74 rport=56908 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748530964.894:17943): pid=86284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=86285 suid=74 rport=56908 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748530964.995:17944): pid=86284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530964.995:17945): pid=86284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748530965.031:17946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748530965.075:17947): pid=86284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748530965.076:17948): pid=86284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86285 suid=74 rport=56908 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748530965.077:17949): pid=86284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748530965.077:17950): pid=86284 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=33 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748530965.077:17950): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd88344c40 a2=4 a3=3e8 items=0 ppid=12358 pid=86284 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748530965.077:17950): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748530965.078:17951): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748530965.094:17952): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530965.095:17953): pid=86287 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748530965.096:17954): pid=86287 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748530965.137:17955): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748530965.137:17956): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748530965.138:17957): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748530965.246:17958): pid=86308 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530965.246:17959): pid=86308 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C2073746F70206368726F6E79642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530965.247:17960): pid=86308 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530965.250:17961): pid=86308 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1748530965.262:17962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748530965.264:17963): pid=86308 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530965.264:17964): pid=86308 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530965.272:17965): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1748530965.308:17966): pid=86316 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530965.308:17967): pid=86316 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C207374617274206368726F6E79642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530965.309:17968): pid=86316 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530965.310:17969): pid=86316 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530965.325:17970): prog-id=531 op=LOAD
type=SERVICE_START msg=audit(1748530965.539:17971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748530965.540:17972): pid=86316 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530965.540:17973): pid=86316 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1748530971.757:17974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748530971.811:17975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748530985.588:17976): pid=86893 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530985.588:17977): pid=86893 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C2073746F70206368726F6E79642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530985.589:17978): pid=86893 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530985.591:17979): pid=86893 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=SERVICE_STOP msg=audit(1748530985.600:17980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748530985.602:17981): pid=86893 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530985.603:17982): pid=86893 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530985.610:17983): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1748530985.643:17984): pid=86901 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748530985.644:17985): pid=86901 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=73797374656D63746C207374617274206368726F6E79642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748530985.644:17986): pid=86901 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748530985.646:17987): pid=86901 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748530985.666:17988): prog-id=532 op=LOAD
type=SERVICE_START msg=audit(1748530985.849:17989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748530985.851:17990): pid=86901 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748530985.851:17991): pid=86901 uid=1000 auid=1000 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531002.850:17992): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26808 suid=1000 rport=41670 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531002.851:17993): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26808 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531002.853:17994): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531002.853:17995): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531002.853:17996): pid=26800 uid=0 auid=1000 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=USER_END msg=audit(1748531005.864:17997): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531005.864:17998): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531005.864:17999): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86287 suid=1000 rport=56908 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531005.865:18000): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86287 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531005.866:18001): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531005.866:18002): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531005.867:18003): pid=86284 uid=0 auid=1000 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531005.959:18004): pid=86997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531005.960:18005): pid=86996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=86997 suid=74 rport=55772 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531005.960:18006): pid=86996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=86997 suid=74 rport=55772 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531006.039:18007): pid=86996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531006.039:18008): pid=86996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531006.074:18009): pid=86996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531006.075:18010): pid=86996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86997 suid=74 rport=55772 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531006.076:18011): pid=86996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531006.076:18012): pid=86996 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=34 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531006.076:18012): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffceeb5bf90 a2=4 a3=3e8 items=0 ppid=12358 pid=86996 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531006.076:18012): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531006.078:18013): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531006.097:18014): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531006.098:18015): pid=86999 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531006.099:18016): pid=86999 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531006.141:18017): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531006.141:18018): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531006.142:18019): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87000 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531006.159:18020): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531006.159:18021): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531006.159:18022): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86999 suid=1000 rport=55772 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531006.161:18023): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86999 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531006.168:18024): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531006.168:18025): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531006.169:18026): pid=86996 uid=0 auid=1000 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=86996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531006.186:18027): pid=87019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87019 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531006.186:18028): pid=87018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=87019 suid=74 rport=55786 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531006.187:18029): pid=87018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=87019 suid=74 rport=55786 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531006.270:18030): pid=87018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531006.270:18031): pid=87018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531006.305:18032): pid=87018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531006.306:18033): pid=87018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87019 suid=74 rport=55786 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531006.308:18034): pid=87018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531006.308:18035): pid=87018 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=35 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531006.308:18035): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffec1f3fe60 a2=4 a3=3e8 items=0 ppid=12358 pid=87018 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=35 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531006.308:18035): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531006.309:18036): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531006.326:18037): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531006.327:18038): pid=87021 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87021 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531006.328:18039): pid=87021 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531006.369:18040): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531006.369:18041): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531006.370:18042): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87022 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531006.421:18043): pid=87022 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531006.421:18044): pid=87022 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531006.422:18045): pid=87022 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531006.425:18046): pid=87022 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531013.368:18047): prog-id=533 op=LOAD
type=SYSCALL msg=audit(1748531013.368:18047): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023fc48 a2=90 a3=0 items=0 ppid=87105 pid=87116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531013.368:18047): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383435333565376630373231626133316136643066663035
type=BPF msg=audit(1748531013.368:18048): prog-id=534 op=LOAD
type=SYSCALL msg=audit(1748531013.368:18048): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00023f9d8 a2=90 a3=0 items=0 ppid=87105 pid=87116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531013.368:18048): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383435333565376630373231626133316136643066663035
type=BPF msg=audit(1748531013.368:18049): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531013.368:18050): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531013.368:18051): prog-id=535 op=LOAD
type=SYSCALL msg=audit(1748531013.368:18051): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023feb0 a2=90 a3=0 items=0 ppid=87105 pid=87116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531013.368:18051): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31383435333565376630373231626133316136643066663035
type=BPF msg=audit(1748531015.487:18052): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531015.774:18053): pid=87022 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531015.774:18054): pid=87022 uid=1000 auid=1000 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531015.778:18055): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87021 suid=1000 rport=55786 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531015.779:18056): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87021 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531015.781:18057): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531015.781:18058): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531015.782:18059): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531015.782:18060): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531015.782:18061): pid=87018 uid=0 auid=1000 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87018 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=AVC msg=audit(1748531016.541:18062): avc:  denied  { read } for  pid=87203 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531016.542:18063): avc:  denied  { open } for  pid=87204 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531016.542:18063): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=558fe9602cf0 a2=80000 a3=0 items=0 ppid=87201 pid=87204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531016.542:18063): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D33386433386100002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D33386433386100002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531016.542:18064): avc:  denied  { getattr } for  pid=87204 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531016.542:18064): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7fc1113b7f35 a2=7ffe89367550 a3=1000 items=0 ppid=87201 pid=87204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531016.542:18064): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D33386433386100002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D33386433386100002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531016.543:18065): avc:  denied  { ioctl } for  pid=87204 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531016.543:18065): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffe89367650 a3=558fe95fc040 items=0 ppid=87201 pid=87204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531016.543:18065): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D33386433386100002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D33386433386100002D2D7072656669783D6E65742F69707636
type=SYSCALL msg=audit(1748531016.541:18062): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=55acc9294cf0 a2=80000 a3=0 items=0 ppid=87202 pid=87203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531016.541:18062): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33386433386100002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33386433386100002D2D7072656669783D6E65742F69707636
type=SERVICE_START msg=audit(1748531017.898:18066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748531018.146:18067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=AVC msg=audit(1748531019.929:18068): avc:  denied  { read } for  pid=87248 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531019.929:18068): avc:  denied  { open } for  pid=87248 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531019.929:18068): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=564801e67cf0 a2=80000 a3=0 items=0 ppid=87246 pid=87248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531019.929:18068): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D61333634623600002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D61333634623600002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531019.929:18069): avc:  denied  { getattr } for  pid=87248 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531019.929:18069): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7fcee05b7f35 a2=7ffffa275590 a3=1000 items=0 ppid=87246 pid=87248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531019.929:18069): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D61333634623600002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D61333634623600002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531019.929:18070): avc:  denied  { ioctl } for  pid=87248 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531019.929:18070): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffffa275690 a3=564801e61040 items=0 ppid=87246 pid=87248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531019.929:18070): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D61333634623600002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D61333634623600002D2D7072656669783D6E65742F69707636
type=BPF msg=audit(1748531021.640:18071): prog-id=536 op=LOAD
type=BPF msg=audit(1748531021.641:18072): prog-id=537 op=LOAD
type=SYSCALL msg=audit(1748531021.641:18072): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=87272 pid=87283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531021.641:18072): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766643063306432373964663231386361343538393962323731313564
type=BPF msg=audit(1748531021.641:18073): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531021.641:18074): prog-id=538 op=LOAD
type=SYSCALL msg=audit(1748531021.641:18074): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=87272 pid=87283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531021.641:18074): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766643063306432373964663231386361343538393962323731313564
type=BPF msg=audit(1748531021.642:18075): prog-id=539 op=LOAD
type=SYSCALL msg=audit(1748531021.642:18075): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=87272 pid=87283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531021.642:18075): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766643063306432373964663231386361343538393962323731313564
type=BPF msg=audit(1748531021.642:18076): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531021.642:18077): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531021.642:18078): prog-id=540 op=LOAD
type=SYSCALL msg=audit(1748531021.642:18078): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=87272 pid=87283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531021.642:18078): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766643063306432373964663231386361343538393962323731313564
type=BPF msg=audit(1748531022.004:18079): prog-id=541 op=LOAD
type=BPF msg=audit(1748531022.004:18080): prog-id=542 op=LOAD
type=SYSCALL msg=audit(1748531022.004:18080): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=87317 pid=87328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.004:18080): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566303866636166386161653865613666336431393332623366633265
type=BPF msg=audit(1748531022.004:18081): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531022.005:18082): prog-id=543 op=LOAD
type=SYSCALL msg=audit(1748531022.005:18082): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=87317 pid=87328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.005:18082): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566303866636166386161653865613666336431393332623366633265
type=BPF msg=audit(1748531022.005:18083): prog-id=544 op=LOAD
type=SYSCALL msg=audit(1748531022.005:18083): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=87317 pid=87328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.005:18083): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566303866636166386161653865613666336431393332623366633265
type=BPF msg=audit(1748531022.005:18084): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531022.005:18085): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531022.005:18086): prog-id=545 op=LOAD
type=SYSCALL msg=audit(1748531022.005:18086): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=87317 pid=87328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.005:18086): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566303866636166386161653865613666336431393332623366633265
type=BPF msg=audit(1748531022.152:18087): prog-id=546 op=LOAD
type=BPF msg=audit(1748531022.153:18088): prog-id=547 op=LOAD
type=SYSCALL msg=audit(1748531022.153:18088): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbad0 a2=90 a3=0 items=0 ppid=87317 pid=87361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.153:18088): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563376563623937643530306338656136633038386465643862616235
type=BPF msg=audit(1748531022.153:18089): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531022.153:18090): prog-id=548 op=LOAD
type=SYSCALL msg=audit(1748531022.153:18090): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbc48 a2=90 a3=0 items=0 ppid=87317 pid=87361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.153:18090): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563376563623937643530306338656136633038386465643862616235
type=BPF msg=audit(1748531022.154:18091): prog-id=549 op=LOAD
type=SYSCALL msg=audit(1748531022.154:18091): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bb9d8 a2=90 a3=0 items=0 ppid=87317 pid=87361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.154:18091): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563376563623937643530306338656136633038386465643862616235
type=BPF msg=audit(1748531022.154:18092): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531022.154:18093): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531022.154:18094): prog-id=550 op=LOAD
type=SYSCALL msg=audit(1748531022.154:18094): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbeb0 a2=90 a3=0 items=0 ppid=87317 pid=87361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.154:18094): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563376563623937643530306338656136633038386465643862616235
type=NETFILTER_CFG msg=audit(1748531022.951:18095): table=filter family=2 entries=55 op=xt_replace pid=87419 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531022.951:18095): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5591def02aa0 items=0 ppid=26202 pid=87419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.951:18095): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531022.952:18096): table=nat family=2 entries=43 op=xt_replace pid=87419 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531022.952:18096): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5591def06c60 items=0 ppid=26202 pid=87419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.952:18096): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531022.981:18097): table=filter family=2 entries=55 op=xt_replace pid=87441 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531022.981:18097): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5596c0a08690 items=0 ppid=26202 pid=87441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.981:18097): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531022.983:18098): table=nat family=2 entries=43 op=xt_replace pid=87441 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531022.983:18098): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5596c0a0eab0 items=0 ppid=26202 pid=87441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531022.983:18098): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1748531024.059:18099): prog-id=551 op=LOAD
type=BPF msg=audit(1748531024.059:18100): prog-id=552 op=LOAD
type=SYSCALL msg=audit(1748531024.059:18100): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000241ad0 a2=90 a3=0 items=0 ppid=87451 pid=87464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.059:18100): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613439323535613163333961396433643137653663386432383765
type=BPF msg=audit(1748531024.060:18101): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531024.060:18102): prog-id=553 op=LOAD
type=SYSCALL msg=audit(1748531024.060:18102): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000241c48 a2=90 a3=0 items=0 ppid=87451 pid=87464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.060:18102): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613439323535613163333961396433643137653663386432383765
type=BPF msg=audit(1748531024.060:18103): prog-id=554 op=LOAD
type=SYSCALL msg=audit(1748531024.060:18103): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002419d8 a2=90 a3=0 items=0 ppid=87451 pid=87464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.060:18103): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613439323535613163333961396433643137653663386432383765
type=BPF msg=audit(1748531024.060:18104): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531024.060:18105): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531024.060:18106): prog-id=555 op=LOAD
type=SYSCALL msg=audit(1748531024.060:18106): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000241eb0 a2=90 a3=0 items=0 ppid=87451 pid=87464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.060:18106): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613439323535613163333961396433643137653663386432383765
type=BPF msg=audit(1748531024.218:18107): prog-id=556 op=LOAD
type=BPF msg=audit(1748531024.220:18108): prog-id=557 op=LOAD
type=SYSCALL msg=audit(1748531024.220:18108): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001bbad0 a2=90 a3=0 items=0 ppid=87451 pid=87500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.220:18108): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334623137613464623264636664626135646163353235376333336638
type=BPF msg=audit(1748531024.220:18109): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531024.220:18110): prog-id=558 op=LOAD
type=SYSCALL msg=audit(1748531024.220:18110): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001bbc48 a2=90 a3=0 items=0 ppid=87451 pid=87500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.220:18110): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334623137613464623264636664626135646163353235376333336638
type=BPF msg=audit(1748531024.221:18111): prog-id=559 op=LOAD
type=SYSCALL msg=audit(1748531024.221:18111): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0001bb9d8 a2=90 a3=0 items=0 ppid=87451 pid=87500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.221:18111): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334623137613464623264636664626135646163353235376333336638
type=BPF msg=audit(1748531024.221:18112): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531024.221:18113): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531024.221:18114): prog-id=560 op=LOAD
type=SYSCALL msg=audit(1748531024.221:18114): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001bbeb0 a2=90 a3=0 items=0 ppid=87451 pid=87500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.221:18114): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334623137613464623264636664626135646163353235376333336638
type=NETFILTER_CFG msg=audit(1748531024.969:18115): table=filter family=2 entries=52 op=xt_replace pid=87580 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531024.969:18115): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559f46658a40 items=0 ppid=26202 pid=87580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.969:18115): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531024.970:18116): table=nat family=2 entries=70 op=xt_replace pid=87580 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531024.970:18116): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559f46662230 items=0 ppid=26202 pid=87580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531024.970:18116): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1748531025.036:18117): prog-id=561 op=LOAD
type=BPF msg=audit(1748531025.037:18118): prog-id=562 op=LOAD
type=SYSCALL msg=audit(1748531025.037:18118): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000119ad0 a2=90 a3=0 items=0 ppid=87556 pid=87573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531025.037:18118): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633356136353031663236363332323230343732653263373465623265
type=BPF msg=audit(1748531025.037:18119): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531025.037:18120): prog-id=563 op=LOAD
type=SYSCALL msg=audit(1748531025.037:18120): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000119c48 a2=90 a3=0 items=0 ppid=87556 pid=87573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531025.037:18120): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633356136353031663236363332323230343732653263373465623265
type=BPF msg=audit(1748531025.037:18121): prog-id=564 op=LOAD
type=SYSCALL msg=audit(1748531025.037:18121): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001199d8 a2=90 a3=0 items=0 ppid=87556 pid=87573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531025.037:18121): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633356136353031663236363332323230343732653263373465623265
type=BPF msg=audit(1748531025.037:18122): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531025.037:18123): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531025.037:18124): prog-id=565 op=LOAD
type=SYSCALL msg=audit(1748531025.037:18124): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000119eb0 a2=90 a3=0 items=0 ppid=87556 pid=87573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531025.037:18124): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633356136353031663236363332323230343732653263373465623265
type=CRYPTO_KEY_USER msg=audit(1748531025.937:18125): pid=87627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531025.939:18126): pid=87619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=87627 suid=74 rport=55462 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531025.939:18127): pid=87619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=87627 suid=74 rport=55462 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=NETFILTER_CFG msg=audit(1748531025.979:18128): table=filter family=2 entries=52 op=xt_replace pid=87642 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531025.979:18128): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55dbd1c72a40 items=0 ppid=26202 pid=87642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531025.979:18128): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531025.996:18129): table=nat family=2 entries=70 op=xt_replace pid=87642 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531025.996:18129): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55dbd1c7eae0 items=0 ppid=26202 pid=87642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531025.996:18129): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=USER_AUTH msg=audit(1748531026.027:18130): pid=87619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531026.027:18131): pid=87619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531026.063:18132): pid=87619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531026.064:18133): pid=87619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87627 suid=74 rport=55462 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531026.071:18134): pid=87619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531026.072:18135): pid=87619 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=36 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531026.072:18135): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd4cfb8e60 a2=4 a3=3e8 items=0 ppid=12358 pid=87619 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=36 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531026.072:18135): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531026.073:18136): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531026.117:18137): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531026.118:18138): pid=87646 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531026.119:18139): pid=87646 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531026.161:18140): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531026.161:18141): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531026.162:18142): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87647 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531026.272:18143): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87646 suid=1000 rport=55462 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531026.274:18144): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87646 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531026.276:18145): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531026.277:18146): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531026.278:18147): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531026.278:18148): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531026.278:18149): pid=87619 uid=0 auid=1000 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87619 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531026.305:18150): pid=87670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531026.305:18151): pid=87669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=87670 suid=74 rport=55474 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531026.308:18152): pid=87669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=87670 suid=74 rport=55474 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531026.391:18153): pid=87669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531026.392:18154): pid=87669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531026.431:18155): pid=87669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531026.432:18156): pid=87669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87670 suid=74 rport=55474 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531026.434:18157): pid=87669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531026.434:18158): pid=87669 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=37 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531026.434:18158): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff52888340 a2=4 a3=3e8 items=0 ppid=12358 pid=87669 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=37 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531026.434:18158): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531026.435:18159): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531026.456:18160): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531026.457:18161): pid=87672 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531026.458:18162): pid=87672 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531026.499:18163): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531026.499:18164): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531026.500:18165): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87673 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531026.586:18166): pid=87673 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531026.586:18167): pid=87673 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531026.587:18168): pid=87673 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531026.590:18169): pid=87673 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531026.933:18170): prog-id=566 op=LOAD
type=SYSCALL msg=audit(1748531026.933:18170): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000121c48 a2=90 a3=0 items=0 ppid=87712 pid=87724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531026.933:18170): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65393836393035356432313731333362333237313861653466
type=BPF msg=audit(1748531026.933:18171): prog-id=567 op=LOAD
type=SYSCALL msg=audit(1748531026.933:18171): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001219d8 a2=90 a3=0 items=0 ppid=87712 pid=87724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531026.933:18171): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65393836393035356432313731333362333237313861653466
type=BPF msg=audit(1748531026.933:18172): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531026.933:18173): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531026.934:18174): prog-id=568 op=LOAD
type=SYSCALL msg=audit(1748531026.934:18174): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000121eb0 a2=90 a3=0 items=0 ppid=87712 pid=87724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531026.934:18174): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65393836393035356432313731333362333237313861653466
type=BPF msg=audit(1748531028.676:18175): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531029.173:18176): pid=87673 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531029.173:18177): pid=87673 uid=1000 auid=1000 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531029.176:18178): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87672 suid=1000 rport=55474 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531029.177:18179): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87672 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531029.179:18180): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531029.180:18181): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531029.180:18182): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531029.180:18183): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531029.180:18184): pid=87669 uid=0 auid=1000 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=87669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=BPF msg=audit(1748531029.488:18185): prog-id=569 op=LOAD
type=BPF msg=audit(1748531029.489:18186): prog-id=570 op=LOAD
type=SYSCALL msg=audit(1748531029.489:18186): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011fad0 a2=90 a3=0 items=0 ppid=87272 pid=87797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531029.489:18186): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261366564316235333162633765366435383236393231383533303933
type=BPF msg=audit(1748531029.489:18187): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531029.489:18188): prog-id=571 op=LOAD
type=SYSCALL msg=audit(1748531029.489:18188): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011fc48 a2=90 a3=0 items=0 ppid=87272 pid=87797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531029.489:18188): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261366564316235333162633765366435383236393231383533303933
type=BPF msg=audit(1748531029.489:18189): prog-id=572 op=LOAD
type=SYSCALL msg=audit(1748531029.489:18189): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011f9d8 a2=90 a3=0 items=0 ppid=87272 pid=87797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531029.489:18189): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261366564316235333162633765366435383236393231383533303933
type=BPF msg=audit(1748531029.489:18190): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531029.489:18191): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531029.489:18192): prog-id=573 op=LOAD
type=SYSCALL msg=audit(1748531029.489:18192): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011feb0 a2=90 a3=0 items=0 ppid=87272 pid=87797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531029.489:18192): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261366564316235333162633765366435383236393231383533303933
type=NETFILTER_CFG msg=audit(1748531029.940:18193): table=filter family=2 entries=52 op=xt_replace pid=87849 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531029.940:18193): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f61285d770 items=0 ppid=26202 pid=87849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531029.940:18193): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531029.941:18194): table=nat family=2 entries=85 op=xt_replace pid=87849 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531029.941:18194): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f61286bdd0 items=0 ppid=26202 pid=87849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531029.941:18194): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_STOP msg=audit(1748531031.061:18195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531031.071:18196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531033.663:18197): prog-id=574 op=LOAD
type=BPF msg=audit(1748531033.666:18198): prog-id=575 op=LOAD
type=SYSCALL msg=audit(1748531033.666:18198): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=87556 pid=88216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531033.666:18198): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763626236393133383932626466663362613230623334333231373931
type=BPF msg=audit(1748531033.666:18199): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531033.666:18200): prog-id=576 op=LOAD
type=SYSCALL msg=audit(1748531033.666:18200): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=87556 pid=88216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531033.666:18200): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763626236393133383932626466663362613230623334333231373931
type=BPF msg=audit(1748531033.666:18201): prog-id=577 op=LOAD
type=SYSCALL msg=audit(1748531033.666:18201): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=87556 pid=88216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531033.666:18201): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763626236393133383932626466663362613230623334333231373931
type=BPF msg=audit(1748531033.666:18202): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531033.666:18203): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531033.666:18204): prog-id=578 op=LOAD
type=SYSCALL msg=audit(1748531033.666:18204): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=87556 pid=88216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531033.666:18204): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763626236393133383932626466663362613230623334333231373931
type=NETFILTER_CFG msg=audit(1748531033.990:18205): table=filter family=2 entries=51 op=xt_replace pid=88278 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531033.990:18205): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c2a9d5f080 items=0 ppid=26202 pid=88278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531033.990:18205): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531033.992:18206): table=nat family=2 entries=94 op=xt_replace pid=88278 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531033.992:18206): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c2a9d714d0 items=0 ppid=26202 pid=88278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531033.992:18206): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=CRYPTO_KEY_USER msg=audit(1748531039.247:18207): pid=88400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531039.249:18208): pid=88399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88400 suid=74 rport=57360 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531039.250:18209): pid=88399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88400 suid=74 rport=57360 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531039.326:18210): pid=88399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531039.326:18211): pid=88399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531039.359:18212): pid=88399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531039.361:18213): pid=88399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88400 suid=74 rport=57360 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531039.362:18214): pid=88399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531039.362:18215): pid=88399 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=38 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531039.362:18215): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd42ef5860 a2=4 a3=3e8 items=0 ppid=12358 pid=88399 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=38 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531039.362:18215): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531039.364:18216): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531039.387:18217): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531039.388:18218): pid=88402 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531039.389:18219): pid=88402 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531039.430:18220): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531039.430:18221): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531039.431:18222): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88403 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531039.459:18223): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88402 suid=1000 rport=57360 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531039.460:18224): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531039.464:18225): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531039.464:18226): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531039.465:18227): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531039.465:18228): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531039.465:18229): pid=88399 uid=0 auid=1000 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531039.479:18230): pid=88422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88422 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531039.480:18231): pid=88421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88422 suid=74 rport=57374 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531039.480:18232): pid=88421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88422 suid=74 rport=57374 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531039.558:18233): pid=88421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531039.558:18234): pid=88421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531039.595:18235): pid=88421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531039.596:18236): pid=88421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88422 suid=74 rport=57374 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531039.600:18237): pid=88421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531039.600:18238): pid=88421 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=39 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531039.600:18238): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc22cbaef0 a2=4 a3=3e8 items=0 ppid=12358 pid=88421 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=39 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531039.600:18238): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531039.601:18239): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531039.618:18240): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531039.619:18241): pid=88424 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88424 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531039.620:18242): pid=88424 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531039.662:18243): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531039.662:18244): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531039.663:18245): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88425 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531039.725:18246): pid=88425 uid=1000 auid=1000 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531039.725:18247): pid=88425 uid=1000 auid=1000 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531039.726:18248): pid=88425 uid=1000 auid=1000 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531039.733:18249): pid=88425 uid=1000 auid=1000 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531040.050:18250): prog-id=579 op=LOAD
type=SYSCALL msg=audit(1748531040.050:18250): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9c48 a2=90 a3=0 items=0 ppid=88465 pid=88475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531040.050:18250): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66326538306561633930333939343563663338313038363765
type=BPF msg=audit(1748531040.051:18251): prog-id=580 op=LOAD
type=SYSCALL msg=audit(1748531040.051:18251): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c99d8 a2=90 a3=0 items=0 ppid=88465 pid=88475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531040.051:18251): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66326538306561633930333939343563663338313038363765
type=BPF msg=audit(1748531040.051:18252): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531040.051:18253): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531040.051:18254): prog-id=581 op=LOAD
type=SYSCALL msg=audit(1748531040.051:18254): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9eb0 a2=90 a3=0 items=0 ppid=88465 pid=88475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531040.051:18254): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66326538306561633930333939343563663338313038363765
type=BPF msg=audit(1748531041.891:18255): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531042.052:18256): pid=88425 uid=1000 auid=1000 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531042.052:18257): pid=88425 uid=1000 auid=1000 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531042.055:18258): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88424 suid=1000 rport=57374 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531042.056:18259): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88424 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531042.059:18260): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531042.059:18261): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531042.060:18262): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531042.060:18263): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531042.060:18264): pid=88421 uid=0 auid=1000 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531052.143:18265): pid=88619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88619 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531052.155:18266): pid=88618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88619 suid=74 rport=56946 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531052.155:18267): pid=88618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88619 suid=74 rport=56946 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531052.232:18268): pid=88618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531052.232:18269): pid=88618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531052.265:18270): pid=88618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531052.267:18271): pid=88618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88619 suid=74 rport=56946 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531052.268:18272): pid=88618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531052.268:18273): pid=88618 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=40 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531052.268:18273): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcde968dc0 a2=4 a3=3e8 items=0 ppid=12358 pid=88618 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531052.268:18273): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531052.269:18274): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531052.285:18275): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531052.286:18276): pid=88621 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531052.287:18277): pid=88621 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531052.328:18278): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531052.328:18279): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531052.329:18280): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88622 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531052.359:18281): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88621 suid=1000 rport=56946 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531052.360:18282): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531052.364:18283): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531052.364:18284): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531052.365:18285): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531052.365:18286): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531052.365:18287): pid=88618 uid=0 auid=1000 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531052.380:18288): pid=88641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531052.381:18289): pid=88640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88641 suid=74 rport=56962 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531052.381:18290): pid=88640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88641 suid=74 rport=56962 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531052.457:18291): pid=88640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531052.457:18292): pid=88640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531052.496:18293): pid=88640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531052.497:18294): pid=88640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88641 suid=74 rport=56962 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531052.498:18295): pid=88640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531052.498:18296): pid=88640 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=41 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531052.498:18296): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffc07025e0 a2=4 a3=3e8 items=0 ppid=12358 pid=88640 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=41 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531052.498:18296): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531052.499:18297): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531052.514:18298): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531052.515:18299): pid=88643 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531052.517:18300): pid=88643 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531052.558:18301): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531052.558:18302): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531052.559:18303): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531052.618:18304): pid=88644 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531052.618:18305): pid=88644 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531052.619:18306): pid=88644 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531052.621:18307): pid=88644 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531052.824:18308): prog-id=582 op=LOAD
type=SYSCALL msg=audit(1748531052.824:18308): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000247c48 a2=90 a3=0 items=0 ppid=88679 pid=88690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531052.824:18308): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62323461633233313365326262363533623533326262333831
type=BPF msg=audit(1748531052.826:18309): prog-id=583 op=LOAD
type=SYSCALL msg=audit(1748531052.826:18309): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0002479d8 a2=90 a3=0 items=0 ppid=88679 pid=88690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531052.826:18309): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62323461633233313365326262363533623533326262333831
type=BPF msg=audit(1748531052.826:18310): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531052.826:18311): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531052.826:18312): prog-id=584 op=LOAD
type=SYSCALL msg=audit(1748531052.826:18312): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000247eb0 a2=90 a3=0 items=0 ppid=88679 pid=88690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531052.826:18312): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62323461633233313365326262363533623533326262333831
type=BPF msg=audit(1748531054.734:18313): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531054.851:18314): pid=88644 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531054.851:18315): pid=88644 uid=1000 auid=1000 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531054.853:18316): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88643 suid=1000 rport=56962 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531054.854:18317): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88643 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531054.856:18318): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531054.856:18319): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531054.857:18320): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531054.857:18321): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531054.857:18322): pid=88640 uid=0 auid=1000 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531064.999:18323): pid=88776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88776 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531065.003:18324): pid=88775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88776 suid=74 rport=48426 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531065.003:18325): pid=88775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88776 suid=74 rport=48426 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531065.077:18326): pid=88775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531065.077:18327): pid=88775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531065.112:18328): pid=88775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531065.113:18329): pid=88775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88776 suid=74 rport=48426 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531065.114:18330): pid=88775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531065.114:18331): pid=88775 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=42 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531065.114:18331): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcac0843d0 a2=4 a3=3e8 items=0 ppid=12358 pid=88775 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=42 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531065.114:18331): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531065.115:18332): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531065.134:18333): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531065.136:18334): pid=88778 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531065.137:18335): pid=88778 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531065.178:18336): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531065.178:18337): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531065.179:18338): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88779 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531065.196:18339): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88778 suid=1000 rport=48426 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531065.197:18340): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531065.201:18341): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531065.201:18342): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531065.202:18343): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531065.202:18344): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531065.202:18345): pid=88775 uid=0 auid=1000 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88775 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531065.217:18346): pid=88798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531065.220:18347): pid=88797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88798 suid=74 rport=48434 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531065.220:18348): pid=88797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88798 suid=74 rport=48434 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531065.298:18349): pid=88797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531065.298:18350): pid=88797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531065.333:18351): pid=88797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531065.334:18352): pid=88797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88798 suid=74 rport=48434 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531065.335:18353): pid=88797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531065.336:18354): pid=88797 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=43 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531065.336:18354): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcff316590 a2=4 a3=3e8 items=0 ppid=12358 pid=88797 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=43 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531065.336:18354): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531065.336:18355): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531065.358:18356): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531065.359:18357): pid=88800 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531065.361:18358): pid=88800 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531065.403:18359): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531065.403:18360): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531065.404:18361): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88801 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531065.455:18362): pid=88801 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531065.455:18363): pid=88801 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531065.456:18364): pid=88801 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531065.458:18365): pid=88801 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531065.662:18366): prog-id=585 op=LOAD
type=SYSCALL msg=audit(1748531065.662:18366): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023fc48 a2=90 a3=0 items=0 ppid=88838 pid=88848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531065.662:18366): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66616334313838623865316663656531303663633736386661
type=BPF msg=audit(1748531065.663:18367): prog-id=586 op=LOAD
type=SYSCALL msg=audit(1748531065.663:18367): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00023f9d8 a2=90 a3=0 items=0 ppid=88838 pid=88848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531065.663:18367): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66616334313838623865316663656531303663633736386661
type=BPF msg=audit(1748531065.663:18368): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531065.664:18369): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531065.664:18370): prog-id=587 op=LOAD
type=SYSCALL msg=audit(1748531065.664:18370): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023feb0 a2=90 a3=0 items=0 ppid=88838 pid=88848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531065.664:18370): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66616334313838623865316663656531303663633736386661
type=BPF msg=audit(1748531067.254:18371): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531067.375:18372): pid=88801 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531067.376:18373): pid=88801 uid=1000 auid=1000 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531067.378:18374): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88800 suid=1000 rport=48434 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531067.379:18375): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88800 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531067.380:18376): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531067.380:18377): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531067.381:18378): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531067.381:18379): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531067.381:18380): pid=88797 uid=0 auid=1000 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88797 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531077.454:18381): pid=88941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531077.455:18382): pid=88940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88941 suid=74 rport=38518 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531077.455:18383): pid=88940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88941 suid=74 rport=38518 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531077.535:18384): pid=88940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531077.535:18385): pid=88940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531077.569:18386): pid=88940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531077.573:18387): pid=88940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88941 suid=74 rport=38518 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531077.574:18388): pid=88940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531077.574:18389): pid=88940 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=44 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531077.574:18389): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff17538b50 a2=4 a3=3e8 items=0 ppid=12358 pid=88940 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=44 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531077.574:18389): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531077.575:18390): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531077.593:18391): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531077.594:18392): pid=88943 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531077.595:18393): pid=88943 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531077.636:18394): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531077.636:18395): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531077.637:18396): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531077.654:18397): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88943 suid=1000 rport=38518 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531077.655:18398): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88943 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531077.659:18399): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531077.660:18400): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531077.660:18401): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531077.660:18402): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531077.660:18403): pid=88940 uid=0 auid=1000 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531077.670:18404): pid=88963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531077.671:18405): pid=88962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88963 suid=74 rport=38526 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531077.672:18406): pid=88962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=88963 suid=74 rport=38526 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531077.750:18407): pid=88962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531077.751:18408): pid=88962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531077.784:18409): pid=88962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531077.784:18410): pid=88962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88963 suid=74 rport=38526 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531077.786:18411): pid=88962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531077.786:18412): pid=88962 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=45 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531077.786:18412): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff554ccb40 a2=4 a3=3e8 items=0 ppid=12358 pid=88962 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=45 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531077.786:18412): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531077.787:18413): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531077.801:18414): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531077.802:18415): pid=88965 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531077.803:18416): pid=88965 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531077.848:18417): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531077.848:18418): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531077.849:18419): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88966 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531077.898:18420): pid=88966 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531077.898:18421): pid=88966 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531077.898:18422): pid=88966 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531077.901:18423): pid=88966 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531078.090:18424): prog-id=588 op=LOAD
type=SYSCALL msg=audit(1748531078.090:18424): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=89002 pid=89013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531078.090:18424): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353535303638653763373437643837366232666661383631
type=BPF msg=audit(1748531078.090:18425): prog-id=589 op=LOAD
type=SYSCALL msg=audit(1748531078.090:18425): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=89002 pid=89013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531078.090:18425): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353535303638653763373437643837366232666661383631
type=BPF msg=audit(1748531078.090:18426): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531078.090:18427): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531078.091:18428): prog-id=590 op=LOAD
type=SYSCALL msg=audit(1748531078.091:18428): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=89002 pid=89013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531078.091:18428): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63353535303638653763373437643837366232666661383631
type=BPF msg=audit(1748531079.668:18429): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531079.777:18430): pid=88966 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531079.777:18431): pid=88966 uid=1000 auid=1000 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531079.780:18432): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88965 suid=1000 rport=38526 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531079.780:18433): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88965 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531079.782:18434): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531079.782:18435): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531079.783:18436): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531079.783:18437): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531079.783:18438): pid=88962 uid=0 auid=1000 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=88962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531089.846:18439): pid=89099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531089.847:18440): pid=89098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89099 suid=74 rport=41704 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531089.847:18441): pid=89098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89099 suid=74 rport=41704 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531089.924:18442): pid=89098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531089.924:18443): pid=89098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531089.957:18444): pid=89098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531089.958:18445): pid=89098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89099 suid=74 rport=41704 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531089.960:18446): pid=89098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531089.960:18447): pid=89098 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=46 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531089.960:18447): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffeec9eb8b0 a2=4 a3=3e8 items=0 ppid=12358 pid=89098 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=46 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531089.960:18447): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531089.961:18448): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531089.976:18449): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531089.977:18450): pid=89101 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531089.978:18451): pid=89101 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531090.020:18452): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531090.020:18453): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531090.021:18454): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89102 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531090.037:18455): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531090.038:18456): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531090.038:18457): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89101 suid=1000 rport=41704 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531090.038:18458): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89101 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531090.039:18459): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531090.040:18460): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531090.040:18461): pid=89098 uid=0 auid=1000 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531090.059:18462): pid=89121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531090.060:18463): pid=89120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89121 suid=74 rport=41710 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531090.060:18464): pid=89120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89121 suid=74 rport=41710 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531090.137:18465): pid=89120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531090.137:18466): pid=89120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531090.174:18467): pid=89120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531090.174:18468): pid=89120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89121 suid=74 rport=41710 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531090.176:18469): pid=89120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531090.176:18470): pid=89120 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=47 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531090.176:18470): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe2ec24c00 a2=4 a3=3e8 items=0 ppid=12358 pid=89120 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=47 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531090.176:18470): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531090.177:18471): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531090.196:18472): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531090.197:18473): pid=89123 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89123 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531090.198:18474): pid=89123 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531090.240:18475): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531090.240:18476): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531090.241:18477): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531090.294:18478): pid=89124 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531090.294:18479): pid=89124 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531090.295:18480): pid=89124 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531090.297:18481): pid=89124 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531090.480:18482): prog-id=591 op=LOAD
type=SYSCALL msg=audit(1748531090.480:18482): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023fc48 a2=90 a3=0 items=0 ppid=89178 pid=89190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531090.480:18482): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663036623530346334633530316332353362633438626232
type=BPF msg=audit(1748531090.481:18483): prog-id=592 op=LOAD
type=SYSCALL msg=audit(1748531090.481:18483): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00023f9d8 a2=90 a3=0 items=0 ppid=89178 pid=89190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531090.481:18483): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663036623530346334633530316332353362633438626232
type=BPF msg=audit(1748531090.481:18484): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531090.481:18485): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531090.481:18486): prog-id=593 op=LOAD
type=SYSCALL msg=audit(1748531090.481:18486): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023feb0 a2=90 a3=0 items=0 ppid=89178 pid=89190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531090.481:18486): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663036623530346334633530316332353362633438626232
type=BPF msg=audit(1748531092.111:18487): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531092.214:18488): pid=89124 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531092.215:18489): pid=89124 uid=1000 auid=1000 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531092.217:18490): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89123 suid=1000 rport=41710 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531092.219:18491): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531092.222:18492): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531092.223:18493): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531092.224:18494): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531092.224:18495): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531092.224:18496): pid=89120 uid=0 auid=1000 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531102.306:18497): pid=89707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89707 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531102.307:18498): pid=89706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89707 suid=74 rport=38638 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531102.307:18499): pid=89706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89707 suid=74 rport=38638 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531102.384:18500): pid=89706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531102.384:18501): pid=89706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531102.417:18502): pid=89706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531102.418:18503): pid=89706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89707 suid=74 rport=38638 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531102.419:18504): pid=89706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531102.419:18505): pid=89706 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=48 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531102.419:18505): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd99e07150 a2=4 a3=3e8 items=0 ppid=12358 pid=89706 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=48 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531102.419:18505): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531102.420:18506): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531102.438:18507): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531102.439:18508): pid=89709 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89709 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531102.440:18509): pid=89709 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531102.482:18510): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531102.482:18511): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531102.483:18512): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89710 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531102.513:18513): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89709 suid=1000 rport=38638 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531102.514:18514): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531102.515:18515): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531102.516:18516): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531102.517:18517): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531102.517:18518): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531102.517:18519): pid=89706 uid=0 auid=1000 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531102.531:18520): pid=89729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531102.532:18521): pid=89728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89729 suid=74 rport=38642 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531102.532:18522): pid=89728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89729 suid=74 rport=38642 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531102.609:18523): pid=89728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531102.609:18524): pid=89728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531102.642:18525): pid=89728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531102.642:18526): pid=89728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89729 suid=74 rport=38642 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531102.644:18527): pid=89728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531102.644:18528): pid=89728 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=49 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531102.644:18528): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe7bdd83b0 a2=4 a3=3e8 items=0 ppid=12358 pid=89728 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=49 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531102.644:18528): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531102.645:18529): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531102.660:18530): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531102.661:18531): pid=89742 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531102.662:18532): pid=89742 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531102.703:18533): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531102.703:18534): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531102.704:18535): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531102.765:18536): pid=89763 uid=1000 auid=1000 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531102.766:18537): pid=89763 uid=1000 auid=1000 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531102.766:18538): pid=89763 uid=1000 auid=1000 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531102.768:18539): pid=89763 uid=1000 auid=1000 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531102.949:18540): prog-id=594 op=LOAD
type=SYSCALL msg=audit(1748531102.949:18540): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=89798 pid=89810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531102.949:18540): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393537303864393135366135653566336432363239323566
type=BPF msg=audit(1748531102.949:18541): prog-id=595 op=LOAD
type=SYSCALL msg=audit(1748531102.949:18541): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=89798 pid=89810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531102.949:18541): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393537303864393135366135653566336432363239323566
type=BPF msg=audit(1748531102.950:18542): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531102.950:18543): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531102.950:18544): prog-id=596 op=LOAD
type=SYSCALL msg=audit(1748531102.950:18544): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=89798 pid=89810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531102.950:18544): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393537303864393135366135653566336432363239323566
type=BPF msg=audit(1748531104.507:18545): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531104.610:18546): pid=89763 uid=1000 auid=1000 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531104.610:18547): pid=89763 uid=1000 auid=1000 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531104.612:18548): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89742 suid=1000 rport=38642 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531104.613:18549): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89742 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531104.615:18550): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531104.615:18551): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531104.615:18552): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531104.616:18553): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531104.616:18554): pid=89728 uid=0 auid=1000 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531114.688:18555): pid=89906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531114.689:18556): pid=89905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89906 suid=74 rport=45018 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531114.689:18557): pid=89905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89906 suid=74 rport=45018 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531114.763:18558): pid=89905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531114.763:18559): pid=89905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531114.797:18560): pid=89905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531114.797:18561): pid=89905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89906 suid=74 rport=45018 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531114.799:18562): pid=89905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531114.799:18563): pid=89905 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=50 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531114.799:18563): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffbc55f420 a2=4 a3=3e8 items=0 ppid=12358 pid=89905 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=50 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531114.799:18563): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531114.800:18564): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531114.817:18565): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531114.818:18566): pid=89908 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531114.819:18567): pid=89908 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531114.861:18568): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531114.861:18569): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531114.862:18570): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89909 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531114.880:18571): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89908 suid=1000 rport=45018 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531114.882:18572): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89908 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531114.885:18573): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531114.886:18574): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531114.886:18575): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531114.887:18576): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531114.887:18577): pid=89905 uid=0 auid=1000 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531114.901:18578): pid=89928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531114.902:18579): pid=89927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89928 suid=74 rport=33056 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531114.902:18580): pid=89927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=89928 suid=74 rport=33056 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531114.980:18581): pid=89927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531114.980:18582): pid=89927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531115.015:18583): pid=89927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531115.016:18584): pid=89927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89928 suid=74 rport=33056 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531115.017:18585): pid=89927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531115.017:18586): pid=89927 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=51 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531115.017:18586): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffccba01750 a2=4 a3=3e8 items=0 ppid=12358 pid=89927 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=51 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531115.017:18586): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531115.018:18587): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531115.039:18588): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531115.040:18589): pid=89930 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531115.041:18590): pid=89930 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531115.082:18591): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531115.082:18592): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531115.083:18593): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89931 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531115.140:18594): pid=89931 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531115.140:18595): pid=89931 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531115.140:18596): pid=89931 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531115.144:18597): pid=89931 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531115.318:18598): prog-id=597 op=LOAD
type=SYSCALL msg=audit(1748531115.318:18598): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=89966 pid=89977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531115.318:18598): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62616130336237343465616532376234396234373165316435
type=BPF msg=audit(1748531115.319:18599): prog-id=598 op=LOAD
type=SYSCALL msg=audit(1748531115.319:18599): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=89966 pid=89977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531115.319:18599): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62616130336237343465616532376234396234373165316435
type=BPF msg=audit(1748531115.319:18600): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531115.319:18601): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531115.319:18602): prog-id=599 op=LOAD
type=SYSCALL msg=audit(1748531115.319:18602): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=89966 pid=89977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531115.319:18602): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62616130336237343465616532376234396234373165316435
type=BPF msg=audit(1748531116.886:18603): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531117.004:18604): pid=89931 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531117.004:18605): pid=89931 uid=1000 auid=1000 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531117.006:18606): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89930 suid=1000 rport=33056 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531117.007:18607): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531117.008:18608): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531117.008:18609): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531117.009:18610): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531117.009:18611): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531117.009:18612): pid=89927 uid=0 auid=1000 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=89927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531127.073:18613): pid=90056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531127.073:18614): pid=90055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90056 suid=74 rport=53500 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531127.074:18615): pid=90055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90056 suid=74 rport=53500 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531127.149:18616): pid=90055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531127.149:18617): pid=90055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531127.183:18618): pid=90055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531127.184:18619): pid=90055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90056 suid=74 rport=53500 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531127.185:18620): pid=90055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531127.185:18621): pid=90055 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=52 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531127.185:18621): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc538dfa10 a2=4 a3=3e8 items=0 ppid=12358 pid=90055 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=52 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531127.185:18621): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531127.186:18622): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531127.212:18623): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531127.213:18624): pid=90058 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531127.214:18625): pid=90058 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531127.255:18626): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531127.255:18627): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531127.256:18628): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90059 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531127.273:18629): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531127.273:18630): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531127.273:18631): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90058 suid=1000 rport=53500 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531127.274:18632): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90058 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531127.275:18633): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531127.275:18634): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531127.275:18635): pid=90055 uid=0 auid=1000 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531127.293:18636): pid=90078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531127.293:18637): pid=90077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90078 suid=74 rport=53506 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531127.293:18638): pid=90077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90078 suid=74 rport=53506 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531127.374:18639): pid=90077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531127.374:18640): pid=90077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531127.408:18641): pid=90077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531127.408:18642): pid=90077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90078 suid=74 rport=53506 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531127.409:18643): pid=90077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531127.409:18644): pid=90077 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=53 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531127.409:18644): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc19e7c230 a2=4 a3=3e8 items=0 ppid=12358 pid=90077 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=53 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531127.409:18644): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531127.410:18645): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531127.427:18646): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531127.428:18647): pid=90080 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90080 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531127.429:18648): pid=90080 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531127.470:18649): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531127.470:18650): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531127.471:18651): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90081 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531127.521:18652): pid=90081 uid=1000 auid=1000 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531127.521:18653): pid=90081 uid=1000 auid=1000 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531127.522:18654): pid=90081 uid=1000 auid=1000 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531127.524:18655): pid=90081 uid=1000 auid=1000 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531127.691:18656): prog-id=600 op=LOAD
type=SYSCALL msg=audit(1748531127.691:18656): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=90117 pid=90128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531127.691:18656): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626234313862663532646236343431343134323437316130
type=BPF msg=audit(1748531127.691:18657): prog-id=601 op=LOAD
type=SYSCALL msg=audit(1748531127.691:18657): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=90117 pid=90128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531127.691:18657): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626234313862663532646236343431343134323437316130
type=BPF msg=audit(1748531127.691:18658): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531127.691:18659): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531127.691:18660): prog-id=602 op=LOAD
type=SYSCALL msg=audit(1748531127.691:18660): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=90117 pid=90128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531127.691:18660): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626234313862663532646236343431343134323437316130
type=BPF msg=audit(1748531129.258:18661): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531129.369:18662): pid=90081 uid=1000 auid=1000 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531129.370:18663): pid=90081 uid=1000 auid=1000 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531129.371:18664): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531129.371:18665): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531129.371:18666): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90080 suid=1000 rport=53506 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531129.372:18667): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90080 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531129.374:18668): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531129.374:18669): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531129.375:18670): pid=90077 uid=0 auid=1000 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531139.450:18671): pid=90203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90203 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531139.451:18672): pid=90202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90203 suid=74 rport=35648 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531139.451:18673): pid=90202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90203 suid=74 rport=35648 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531139.532:18674): pid=90202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531139.532:18675): pid=90202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531139.566:18676): pid=90202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531139.567:18677): pid=90202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90203 suid=74 rport=35648 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531139.569:18678): pid=90202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531139.569:18679): pid=90202 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=54 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531139.569:18679): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff7a893840 a2=4 a3=3e8 items=0 ppid=12358 pid=90202 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=54 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531139.569:18679): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531139.570:18680): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531139.585:18681): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531139.586:18682): pid=90205 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531139.587:18683): pid=90205 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531139.629:18684): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531139.629:18685): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531139.630:18686): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90206 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531139.646:18687): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531139.646:18688): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531139.646:18689): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90205 suid=1000 rport=35648 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531139.647:18690): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90205 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531139.648:18691): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531139.649:18692): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531139.649:18693): pid=90202 uid=0 auid=1000 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531139.665:18694): pid=90226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531139.666:18695): pid=90224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90226 suid=74 rport=35654 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531139.667:18696): pid=90224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90226 suid=74 rport=35654 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531139.743:18697): pid=90224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531139.743:18698): pid=90224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531139.776:18699): pid=90224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531139.777:18700): pid=90224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90226 suid=74 rport=35654 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531139.778:18701): pid=90224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531139.778:18702): pid=90224 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=55 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531139.778:18702): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff5e472c00 a2=4 a3=3e8 items=0 ppid=12358 pid=90224 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=55 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531139.778:18702): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531139.779:18703): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531139.798:18704): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531139.799:18705): pid=90228 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531139.800:18706): pid=90228 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531139.841:18707): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531139.841:18708): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531139.842:18709): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90229 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531139.892:18710): pid=90229 uid=1000 auid=1000 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531139.892:18711): pid=90229 uid=1000 auid=1000 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531139.892:18712): pid=90229 uid=1000 auid=1000 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531139.895:18713): pid=90229 uid=1000 auid=1000 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531140.075:18714): prog-id=603 op=LOAD
type=SYSCALL msg=audit(1748531140.075:18714): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=90264 pid=90276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531140.075:18714): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32313063656366643362653630323730373565373162386339
type=BPF msg=audit(1748531140.076:18715): prog-id=604 op=LOAD
type=SYSCALL msg=audit(1748531140.076:18715): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=90264 pid=90276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531140.076:18715): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32313063656366643362653630323730373565373162386339
type=BPF msg=audit(1748531140.076:18716): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531140.076:18717): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531140.076:18718): prog-id=605 op=LOAD
type=SYSCALL msg=audit(1748531140.076:18718): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=90264 pid=90276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531140.076:18718): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32313063656366643362653630323730373565373162386339
type=BPF msg=audit(1748531141.641:18719): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531141.755:18720): pid=90229 uid=1000 auid=1000 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531141.755:18721): pid=90229 uid=1000 auid=1000 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531141.758:18722): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90228 suid=1000 rport=35654 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531141.759:18723): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531141.760:18724): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531141.760:18725): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531141.761:18726): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531141.761:18727): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531141.761:18728): pid=90224 uid=0 auid=1000 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531151.833:18729): pid=90564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531151.836:18730): pid=90561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90564 suid=74 rport=56908 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531151.837:18731): pid=90561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90564 suid=74 rport=56908 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531151.918:18732): pid=90561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531151.918:18733): pid=90561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531151.952:18734): pid=90561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531151.953:18735): pid=90561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90564 suid=74 rport=56908 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531151.955:18736): pid=90561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531151.955:18737): pid=90561 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=56 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531151.955:18737): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe17fc42d0 a2=4 a3=3e8 items=0 ppid=12358 pid=90561 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=56 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531151.955:18737): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531151.956:18738): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531151.972:18739): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531151.973:18740): pid=90572 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531151.974:18741): pid=90572 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531152.015:18742): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531152.015:18743): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531152.016:18744): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90580 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531152.047:18745): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90572 suid=1000 rport=56908 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531152.047:18746): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90572 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531152.056:18747): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531152.056:18748): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531152.057:18749): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531152.057:18750): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531152.057:18751): pid=90561 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531152.069:18752): pid=90615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531152.072:18753): pid=90614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90615 suid=74 rport=56946 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531152.072:18754): pid=90614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=90615 suid=74 rport=56946 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531152.149:18755): pid=90614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531152.149:18756): pid=90614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531152.209:18757): pid=90614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531152.209:18758): pid=90614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90615 suid=74 rport=56946 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531152.210:18759): pid=90614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531152.211:18760): pid=90614 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=57 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531152.211:18760): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff81dc9830 a2=4 a3=3e8 items=0 ppid=12358 pid=90614 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=57 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531152.211:18760): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531152.211:18761): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531152.226:18762): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531152.227:18763): pid=90617 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531152.228:18764): pid=90617 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531152.271:18765): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531152.271:18766): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531152.272:18767): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531152.338:18768): pid=90637 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531152.338:18769): pid=90637 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531152.339:18770): pid=90637 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531152.341:18771): pid=90637 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531152.547:18772): prog-id=606 op=LOAD
type=SYSCALL msg=audit(1748531152.547:18772): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012dc48 a2=90 a3=0 items=0 ppid=90680 pid=90691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531152.547:18772): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343461633438663937653361346366643362613063386565
type=BPF msg=audit(1748531152.547:18773): prog-id=607 op=LOAD
type=SYSCALL msg=audit(1748531152.547:18773): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00012d9d8 a2=90 a3=0 items=0 ppid=90680 pid=90691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531152.547:18773): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343461633438663937653361346366643362613063386565
type=BPF msg=audit(1748531152.547:18774): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531152.547:18775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531152.547:18776): prog-id=608 op=LOAD
type=SYSCALL msg=audit(1748531152.547:18776): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00012deb0 a2=90 a3=0 items=0 ppid=90680 pid=90691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531152.547:18776): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343461633438663937653361346366643362613063386565
type=BPF msg=audit(1748531154.358:18777): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531154.516:18778): pid=90637 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531154.518:18779): pid=90637 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531154.528:18780): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90617 suid=1000 rport=56946 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531154.529:18781): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90617 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531154.531:18782): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531154.531:18783): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531154.532:18784): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531154.532:18785): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531154.532:18786): pid=90614 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90614 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531164.609:18787): pid=91000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531164.610:18788): pid=90999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91000 suid=74 rport=47734 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531164.610:18789): pid=90999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91000 suid=74 rport=47734 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531164.690:18790): pid=90999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531164.690:18791): pid=90999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531164.724:18792): pid=90999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531164.724:18793): pid=90999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91000 suid=74 rport=47734 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531164.726:18794): pid=90999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531164.726:18795): pid=90999 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=58 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531164.726:18795): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff046d7550 a2=4 a3=3e8 items=0 ppid=12358 pid=90999 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=58 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531164.726:18795): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531164.726:18796): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531164.742:18797): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531164.743:18798): pid=91002 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531164.744:18799): pid=91002 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531164.786:18800): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531164.786:18801): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531164.788:18802): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91003 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531164.818:18803): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531164.818:18804): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531164.818:18805): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91002 suid=1000 rport=47734 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531164.819:18806): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91002 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531164.820:18807): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531164.820:18808): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531164.821:18809): pid=90999 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=90999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531164.841:18810): pid=91022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531164.843:18811): pid=91021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91022 suid=74 rport=53876 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531164.844:18812): pid=91021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91022 suid=74 rport=53876 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531164.919:18813): pid=91021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531164.919:18814): pid=91021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531164.957:18815): pid=91021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531164.957:18816): pid=91021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91022 suid=74 rport=53876 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531164.959:18817): pid=91021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531164.959:18818): pid=91021 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=59 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531164.959:18818): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdc9121e10 a2=4 a3=3e8 items=0 ppid=12358 pid=91021 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531164.959:18818): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531164.960:18819): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531164.976:18820): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531164.977:18821): pid=91024 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91024 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531164.978:18822): pid=91024 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531165.020:18823): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531165.020:18824): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531165.021:18825): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531165.080:18826): pid=91025 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531165.080:18827): pid=91025 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531165.081:18828): pid=91025 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531165.084:18829): pid=91025 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531165.283:18830): prog-id=609 op=LOAD
type=SYSCALL msg=audit(1748531165.283:18830): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=91061 pid=91073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531165.283:18830): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373936643361646630383132616265626463393138336430
type=BPF msg=audit(1748531165.284:18831): prog-id=610 op=LOAD
type=SYSCALL msg=audit(1748531165.284:18831): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=91061 pid=91073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531165.284:18831): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373936643361646630383132616265626463393138336430
type=BPF msg=audit(1748531165.284:18832): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531165.284:18833): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531165.284:18834): prog-id=611 op=LOAD
type=SYSCALL msg=audit(1748531165.284:18834): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=91061 pid=91073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531165.284:18834): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373936643361646630383132616265626463393138336430
type=BPF msg=audit(1748531166.903:18835): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531167.013:18836): pid=91025 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531167.013:18837): pid=91025 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531167.016:18838): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91024 suid=1000 rport=53876 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531167.017:18839): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91024 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531167.019:18840): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531167.019:18841): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531167.019:18842): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531167.019:18843): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531167.020:18844): pid=91021 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91021 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531177.086:18845): pid=91155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531177.087:18846): pid=91154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91155 suid=74 rport=38368 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531177.087:18847): pid=91154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91155 suid=74 rport=38368 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531177.165:18848): pid=91154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531177.165:18849): pid=91154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531177.200:18850): pid=91154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531177.201:18851): pid=91154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91155 suid=74 rport=38368 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531177.203:18852): pid=91154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531177.203:18853): pid=91154 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=60 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531177.203:18853): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff68a41350 a2=4 a3=3e8 items=0 ppid=12358 pid=91154 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=60 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531177.203:18853): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531177.203:18854): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531177.223:18855): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531177.224:18856): pid=91157 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91157 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531177.225:18857): pid=91157 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531177.266:18858): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531177.266:18859): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531177.267:18860): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531177.284:18861): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531177.284:18862): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531177.284:18863): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91157 suid=1000 rport=38368 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531177.285:18864): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91157 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531177.286:18865): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531177.286:18866): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531177.287:18867): pid=91154 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531177.304:18868): pid=91177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531177.305:18869): pid=91176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91177 suid=74 rport=38372 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531177.305:18870): pid=91176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91177 suid=74 rport=38372 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531177.381:18871): pid=91176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531177.381:18872): pid=91176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531177.414:18873): pid=91176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531177.414:18874): pid=91176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91177 suid=74 rport=38372 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531177.416:18875): pid=91176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531177.416:18876): pid=91176 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=61 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531177.416:18876): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffef7ef62c0 a2=4 a3=3e8 items=0 ppid=12358 pid=91176 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=61 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531177.416:18876): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531177.416:18877): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531177.434:18878): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531177.435:18879): pid=91179 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531177.436:18880): pid=91179 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531177.477:18881): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531177.477:18882): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531177.478:18883): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91180 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531177.536:18884): pid=91180 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531177.536:18885): pid=91180 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531177.537:18886): pid=91180 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531177.539:18887): pid=91180 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531177.727:18888): prog-id=612 op=LOAD
type=SYSCALL msg=audit(1748531177.727:18888): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a3c48 a2=90 a3=0 items=0 ppid=91217 pid=91227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531177.727:18888): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31396537353564393036653432653035663633626661613333
type=BPF msg=audit(1748531177.728:18889): prog-id=613 op=LOAD
type=SYSCALL msg=audit(1748531177.728:18889): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a39d8 a2=90 a3=0 items=0 ppid=91217 pid=91227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531177.728:18889): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31396537353564393036653432653035663633626661613333
type=BPF msg=audit(1748531177.728:18890): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531177.728:18891): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531177.728:18892): prog-id=614 op=LOAD
type=SYSCALL msg=audit(1748531177.728:18892): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a3eb0 a2=90 a3=0 items=0 ppid=91217 pid=91227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531177.728:18892): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31396537353564393036653432653035663633626661613333
type=BPF msg=audit(1748531179.358:18893): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531179.464:18894): pid=91180 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531179.465:18895): pid=91180 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531179.467:18896): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91179 suid=1000 rport=38372 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531179.468:18897): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531179.469:18898): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531179.469:18899): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531179.470:18900): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531179.470:18901): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531179.470:18902): pid=91176 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531189.542:18903): pid=91301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531189.543:18904): pid=91300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91301 suid=74 rport=51702 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531189.543:18905): pid=91300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91301 suid=74 rport=51702 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531189.623:18906): pid=91300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531189.623:18907): pid=91300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531189.658:18908): pid=91300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531189.658:18909): pid=91300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91301 suid=74 rport=51702 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531189.660:18910): pid=91300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531189.660:18911): pid=91300 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=62 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531189.660:18911): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc9c023cd0 a2=4 a3=3e8 items=0 ppid=12358 pid=91300 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531189.660:18911): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531189.661:18912): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531189.680:18913): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531189.681:18914): pid=91303 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91303 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531189.682:18915): pid=91303 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531189.724:18916): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531189.724:18917): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531189.725:18918): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91304 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531189.742:18919): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91303 suid=1000 rport=51702 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531189.743:18920): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531189.745:18921): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531189.745:18922): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531189.745:18923): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531189.745:18924): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531189.746:18925): pid=91300 uid=0 auid=1000 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91300 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531189.767:18926): pid=91323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531189.768:18927): pid=91322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91323 suid=74 rport=51716 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531189.768:18928): pid=91322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91323 suid=74 rport=51716 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531189.844:18929): pid=91322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531189.844:18930): pid=91322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531189.879:18931): pid=91322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531189.879:18932): pid=91322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91323 suid=74 rport=51716 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531189.881:18933): pid=91322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531189.881:18934): pid=91322 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=63 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531189.881:18934): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe3504eec0 a2=4 a3=3e8 items=0 ppid=12358 pid=91322 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=63 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531189.881:18934): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531189.882:18935): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531189.894:18936): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531189.895:18937): pid=91325 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531189.896:18938): pid=91325 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531189.937:18939): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531189.937:18940): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531189.938:18941): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91326 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531189.990:18942): pid=91326 uid=1000 auid=1000 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531189.990:18943): pid=91326 uid=1000 auid=1000 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531189.991:18944): pid=91326 uid=1000 auid=1000 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531189.993:18945): pid=91326 uid=1000 auid=1000 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531190.157:18946): prog-id=615 op=LOAD
type=SYSCALL msg=audit(1748531190.157:18946): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=91362 pid=91374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531190.157:18946): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37376639666531663835376265383236656337376636323639
type=BPF msg=audit(1748531190.157:18947): prog-id=616 op=LOAD
type=SYSCALL msg=audit(1748531190.157:18947): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=91362 pid=91374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531190.157:18947): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37376639666531663835376265383236656337376636323639
type=BPF msg=audit(1748531190.158:18948): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531190.158:18949): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531190.158:18950): prog-id=617 op=LOAD
type=SYSCALL msg=audit(1748531190.158:18950): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=91362 pid=91374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531190.158:18950): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37376639666531663835376265383236656337376636323639
type=BPF msg=audit(1748531191.702:18951): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531191.812:18952): pid=91326 uid=1000 auid=1000 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531191.812:18953): pid=91326 uid=1000 auid=1000 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531191.814:18954): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91325 suid=1000 rport=51716 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531191.814:18955): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531191.816:18956): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531191.816:18957): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531191.816:18958): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531191.816:18959): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531191.817:18960): pid=91322 uid=0 auid=1000 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531201.882:18961): pid=91458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531201.883:18962): pid=91457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91458 suid=74 rport=59852 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531201.883:18963): pid=91457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91458 suid=74 rport=59852 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531201.960:18964): pid=91457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531201.960:18965): pid=91457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531201.994:18966): pid=91457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531201.994:18967): pid=91457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91458 suid=74 rport=59852 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531201.995:18968): pid=91457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531201.996:18969): pid=91457 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=64 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531201.996:18969): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffebb2f6120 a2=4 a3=3e8 items=0 ppid=12358 pid=91457 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531201.996:18969): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531201.996:18970): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531202.011:18971): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531202.011:18972): pid=91460 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91460 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531202.012:18973): pid=91460 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531202.054:18974): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531202.054:18975): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531202.055:18976): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91461 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531202.072:18977): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91460 suid=1000 rport=59852 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531202.073:18978): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91460 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531202.074:18979): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531202.074:18980): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531202.075:18981): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531202.075:18982): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531202.075:18983): pid=91457 uid=0 auid=1000 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91457 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531202.090:18984): pid=91480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531202.091:18985): pid=91479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91480 suid=74 rport=59866 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531202.091:18986): pid=91479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=91480 suid=74 rport=59866 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531202.169:18987): pid=91479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531202.169:18988): pid=91479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531202.202:18989): pid=91479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531202.203:18990): pid=91479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91480 suid=74 rport=59866 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531202.204:18991): pid=91479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531202.204:18992): pid=91479 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=65 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531202.204:18992): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdc826cb20 a2=4 a3=3e8 items=0 ppid=12358 pid=91479 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531202.204:18992): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531202.205:18993): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531202.221:18994): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531202.222:18995): pid=91482 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531202.222:18996): pid=91482 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531202.264:18997): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531202.264:18998): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531202.265:18999): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91483 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531202.315:19000): pid=91483 uid=1000 auid=1000 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531202.315:19001): pid=91483 uid=1000 auid=1000 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531202.316:19002): pid=91483 uid=1000 auid=1000 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531202.319:19003): pid=91483 uid=1000 auid=1000 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531202.496:19004): prog-id=618 op=LOAD
type=SYSCALL msg=audit(1748531202.496:19004): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=91518 pid=91529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531202.496:19004): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353966306135343065363036386466373162633636363830
type=BPF msg=audit(1748531202.496:19005): prog-id=619 op=LOAD
type=SYSCALL msg=audit(1748531202.496:19005): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=91518 pid=91529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531202.496:19005): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353966306135343065363036386466373162633636363830
type=BPF msg=audit(1748531202.496:19006): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531202.496:19007): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531202.497:19008): prog-id=620 op=LOAD
type=SYSCALL msg=audit(1748531202.497:19008): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=91518 pid=91529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531202.497:19008): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39353966306135343065363036386466373162633636363830
type=BPF msg=audit(1748531204.076:19009): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531204.185:19010): pid=91483 uid=1000 auid=1000 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531204.185:19011): pid=91483 uid=1000 auid=1000 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531204.187:19012): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91482 suid=1000 rport=59866 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531204.188:19013): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91482 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531204.189:19014): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531204.190:19015): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531204.190:19016): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531204.190:19017): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531204.190:19018): pid=91479 uid=0 auid=1000 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=91479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531214.266:19019): pid=92068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531214.267:19020): pid=92067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92068 suid=74 rport=34426 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531214.267:19021): pid=92067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92068 suid=74 rport=34426 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531214.343:19022): pid=92067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531214.343:19023): pid=92067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531214.379:19024): pid=92067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531214.380:19025): pid=92067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92068 suid=74 rport=34426 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531214.381:19026): pid=92067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531214.381:19027): pid=92067 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=66 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531214.381:19027): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff17cd49d0 a2=4 a3=3e8 items=0 ppid=12358 pid=92067 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=66 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531214.381:19027): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531214.383:19028): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531214.400:19029): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531214.401:19030): pid=92070 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531214.402:19031): pid=92070 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531214.444:19032): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531214.444:19033): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531214.445:19034): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92071 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531214.461:19035): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531214.461:19036): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531214.462:19037): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92070 suid=1000 rport=34426 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531214.463:19038): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92070 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531214.464:19039): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531214.464:19040): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531214.465:19041): pid=92067 uid=0 auid=1000 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531214.483:19042): pid=92090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531214.484:19043): pid=92089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92090 suid=74 rport=34438 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531214.484:19044): pid=92089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92090 suid=74 rport=34438 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531214.562:19045): pid=92089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531214.562:19046): pid=92089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531214.596:19047): pid=92089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531214.596:19048): pid=92089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92090 suid=74 rport=34438 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531214.598:19049): pid=92089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531214.598:19050): pid=92089 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=67 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531214.598:19050): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc98542fa0 a2=4 a3=3e8 items=0 ppid=12358 pid=92089 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=67 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531214.598:19050): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531214.599:19051): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531214.617:19052): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531214.618:19053): pid=92092 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531214.618:19054): pid=92092 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531214.660:19055): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531214.660:19056): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531214.661:19057): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92093 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531214.711:19058): pid=92093 uid=1000 auid=1000 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531214.711:19059): pid=92093 uid=1000 auid=1000 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531214.712:19060): pid=92093 uid=1000 auid=1000 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531214.714:19061): pid=92093 uid=1000 auid=1000 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531214.880:19062): prog-id=621 op=LOAD
type=SYSCALL msg=audit(1748531214.880:19062): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=92128 pid=92140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531214.880:19062): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303034323961646532656534303938653331613334626433
type=BPF msg=audit(1748531214.880:19063): prog-id=622 op=LOAD
type=SYSCALL msg=audit(1748531214.880:19063): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=92128 pid=92140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531214.880:19063): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303034323961646532656534303938653331613334626433
type=BPF msg=audit(1748531214.880:19064): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531214.880:19065): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531214.880:19066): prog-id=623 op=LOAD
type=SYSCALL msg=audit(1748531214.880:19066): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=92128 pid=92140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531214.880:19066): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303034323961646532656534303938653331613334626433
type=BPF msg=audit(1748531216.430:19067): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531216.550:19068): pid=92093 uid=1000 auid=1000 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531216.550:19069): pid=92093 uid=1000 auid=1000 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531216.553:19070): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92092 suid=1000 rport=34438 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531216.554:19071): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92092 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531216.555:19072): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531216.555:19073): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531216.556:19074): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531216.556:19075): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531216.556:19076): pid=92089 uid=0 auid=1000 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531226.621:19077): pid=92254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531226.622:19078): pid=92253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92254 suid=74 rport=47678 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531226.622:19079): pid=92253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92254 suid=74 rport=47678 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531226.697:19080): pid=92253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531226.697:19081): pid=92253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531226.731:19082): pid=92253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531226.732:19083): pid=92253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92254 suid=74 rport=47678 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531226.733:19084): pid=92253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531226.733:19085): pid=92253 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=68 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531226.733:19085): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff842c6480 a2=4 a3=3e8 items=0 ppid=12358 pid=92253 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531226.733:19085): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531226.734:19086): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531226.753:19087): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531226.754:19088): pid=92256 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92256 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531226.755:19089): pid=92256 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531226.797:19090): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531226.797:19091): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531226.798:19092): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531226.815:19093): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531226.815:19094): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531226.815:19095): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92256 suid=1000 rport=47678 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531226.815:19096): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92256 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531226.817:19097): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531226.817:19098): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531226.818:19099): pid=92253 uid=0 auid=1000 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92253 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531226.835:19100): pid=92276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531226.836:19101): pid=92275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92276 suid=74 rport=47684 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531226.836:19102): pid=92275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92276 suid=74 rport=47684 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531226.912:19103): pid=92275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531226.912:19104): pid=92275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531226.945:19105): pid=92275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531226.945:19106): pid=92275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92276 suid=74 rport=47684 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531226.947:19107): pid=92275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531226.947:19108): pid=92275 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=69 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531226.947:19108): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc6821b870 a2=4 a3=3e8 items=0 ppid=12358 pid=92275 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=69 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531226.947:19108): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531226.948:19109): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531226.961:19110): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531226.961:19111): pid=92278 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92278 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531226.962:19112): pid=92278 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531227.004:19113): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531227.004:19114): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531227.005:19115): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92279 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531227.054:19116): pid=92279 uid=1000 auid=1000 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531227.054:19117): pid=92279 uid=1000 auid=1000 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531227.055:19118): pid=92279 uid=1000 auid=1000 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531227.057:19119): pid=92279 uid=1000 auid=1000 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531227.220:19120): prog-id=624 op=LOAD
type=SYSCALL msg=audit(1748531227.220:19120): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9c48 a2=90 a3=0 items=0 ppid=92315 pid=92327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531227.220:19120): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35313537653631373433353834313132633030343733363366
type=BPF msg=audit(1748531227.221:19121): prog-id=625 op=LOAD
type=SYSCALL msg=audit(1748531227.221:19121): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c99d8 a2=90 a3=0 items=0 ppid=92315 pid=92327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531227.221:19121): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35313537653631373433353834313132633030343733363366
type=BPF msg=audit(1748531227.221:19122): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531227.221:19123): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531227.221:19124): prog-id=626 op=LOAD
type=SYSCALL msg=audit(1748531227.221:19124): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9eb0 a2=90 a3=0 items=0 ppid=92315 pid=92327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531227.221:19124): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35313537653631373433353834313132633030343733363366
type=BPF msg=audit(1748531228.742:19125): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531228.854:19126): pid=92279 uid=1000 auid=1000 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531228.854:19127): pid=92279 uid=1000 auid=1000 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531228.856:19128): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92278 suid=1000 rport=47684 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531228.857:19129): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92278 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531228.858:19130): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531228.858:19131): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531228.859:19132): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531228.859:19133): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531228.859:19134): pid=92275 uid=0 auid=1000 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531238.928:19135): pid=92408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531238.929:19136): pid=92407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92408 suid=74 rport=38026 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531238.929:19137): pid=92407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92408 suid=74 rport=38026 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531239.008:19138): pid=92407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531239.008:19139): pid=92407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531239.042:19140): pid=92407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531239.042:19141): pid=92407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92408 suid=74 rport=38026 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531239.043:19142): pid=92407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531239.043:19143): pid=92407 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=70 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531239.043:19143): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd8ee1fcb0 a2=4 a3=3e8 items=0 ppid=12358 pid=92407 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=70 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531239.043:19143): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531239.044:19144): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531239.060:19145): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531239.061:19146): pid=92410 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531239.062:19147): pid=92410 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531239.105:19148): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531239.105:19149): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531239.106:19150): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531239.123:19151): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531239.123:19152): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531239.123:19153): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92410 suid=1000 rport=38026 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531239.124:19154): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92410 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531239.125:19155): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531239.125:19156): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531239.126:19157): pid=92407 uid=0 auid=1000 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531239.141:19158): pid=92430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531239.141:19159): pid=92429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92430 suid=74 rport=38028 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531239.142:19160): pid=92429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92430 suid=74 rport=38028 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531239.219:19161): pid=92429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531239.219:19162): pid=92429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531239.252:19163): pid=92429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531239.253:19164): pid=92429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92430 suid=74 rport=38028 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531239.254:19165): pid=92429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531239.254:19166): pid=92429 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=71 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531239.254:19166): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffed4fbc140 a2=4 a3=3e8 items=0 ppid=12358 pid=92429 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531239.254:19166): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531239.255:19167): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531239.270:19168): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531239.271:19169): pid=92432 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92432 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531239.272:19170): pid=92432 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531239.314:19171): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531239.314:19172): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531239.315:19173): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92433 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531239.365:19174): pid=92433 uid=1000 auid=1000 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531239.365:19175): pid=92433 uid=1000 auid=1000 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531239.365:19176): pid=92433 uid=1000 auid=1000 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531239.368:19177): pid=92433 uid=1000 auid=1000 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531239.518:19178): prog-id=627 op=LOAD
type=SYSCALL msg=audit(1748531239.518:19178): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=92468 pid=92479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531239.518:19178): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383138666663383136343739343532626465393663363336
type=BPF msg=audit(1748531239.518:19179): prog-id=628 op=LOAD
type=SYSCALL msg=audit(1748531239.518:19179): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=92468 pid=92479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531239.518:19179): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383138666663383136343739343532626465393663363336
type=BPF msg=audit(1748531239.518:19180): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531239.518:19181): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531239.518:19182): prog-id=629 op=LOAD
type=SYSCALL msg=audit(1748531239.518:19182): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=92468 pid=92479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531239.518:19182): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383138666663383136343739343532626465393663363336
type=BPF msg=audit(1748531241.092:19183): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531241.218:19184): pid=92433 uid=1000 auid=1000 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531241.218:19185): pid=92433 uid=1000 auid=1000 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531241.220:19186): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531241.220:19187): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531241.220:19188): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92432 suid=1000 rport=38028 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531241.221:19189): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92432 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531241.222:19190): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531241.223:19191): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531241.223:19192): pid=92429 uid=0 auid=1000 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92429 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531251.287:19193): pid=92555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92555 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531251.288:19194): pid=92554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92555 suid=74 rport=41630 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531251.288:19195): pid=92554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92555 suid=74 rport=41630 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531251.362:19196): pid=92554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531251.363:19197): pid=92554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531251.395:19198): pid=92554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531251.396:19199): pid=92554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92555 suid=74 rport=41630 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531251.398:19200): pid=92554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531251.398:19201): pid=92554 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=72 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531251.398:19201): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd4b561650 a2=4 a3=3e8 items=0 ppid=12358 pid=92554 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531251.398:19201): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531251.399:19202): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531251.419:19203): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531251.420:19204): pid=92557 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92557 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531251.421:19205): pid=92557 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531251.463:19206): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531251.463:19207): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531251.464:19208): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92558 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531251.481:19209): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92557 suid=1000 rport=41630 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531251.482:19210): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92557 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531251.484:19211): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531251.484:19212): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531251.485:19213): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531251.485:19214): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531251.485:19215): pid=92554 uid=0 auid=1000 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92554 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531251.501:19216): pid=92577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531251.501:19217): pid=92576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92577 suid=74 rport=41642 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531251.501:19218): pid=92576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92577 suid=74 rport=41642 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531251.582:19219): pid=92576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531251.582:19220): pid=92576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531251.615:19221): pid=92576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531251.616:19222): pid=92576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92577 suid=74 rport=41642 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531251.617:19223): pid=92576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531251.617:19224): pid=92576 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=73 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531251.617:19224): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdb0ea5aa0 a2=4 a3=3e8 items=0 ppid=12358 pid=92576 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=73 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531251.617:19224): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531251.618:19225): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531251.632:19226): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531251.633:19227): pid=92579 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531251.634:19228): pid=92579 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531251.675:19229): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531251.675:19230): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531251.676:19231): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92580 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531251.725:19232): pid=92580 uid=1000 auid=1000 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531251.725:19233): pid=92580 uid=1000 auid=1000 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531251.725:19234): pid=92580 uid=1000 auid=1000 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531251.729:19235): pid=92580 uid=1000 auid=1000 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531251.899:19236): prog-id=630 op=LOAD
type=SYSCALL msg=audit(1748531251.899:19236): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9c48 a2=90 a3=0 items=0 ppid=92617 pid=92629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531251.899:19236): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363539376461393866666632636633613165636432626434
type=BPF msg=audit(1748531251.900:19237): prog-id=631 op=LOAD
type=SYSCALL msg=audit(1748531251.900:19237): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c99d8 a2=90 a3=0 items=0 ppid=92617 pid=92629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531251.900:19237): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363539376461393866666632636633613165636432626434
type=BPF msg=audit(1748531251.900:19238): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531251.900:19239): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531251.900:19240): prog-id=632 op=LOAD
type=SYSCALL msg=audit(1748531251.900:19240): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c9eb0 a2=90 a3=0 items=0 ppid=92617 pid=92629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531251.900:19240): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363539376461393866666632636633613165636432626434
type=BPF msg=audit(1748531253.461:19241): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531253.569:19242): pid=92580 uid=1000 auid=1000 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531253.569:19243): pid=92580 uid=1000 auid=1000 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531253.572:19244): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92579 suid=1000 rport=41642 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531253.573:19245): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92579 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531253.574:19246): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531253.575:19247): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531253.575:19248): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531253.575:19249): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531253.575:19250): pid=92576 uid=0 auid=1000 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531263.640:19251): pid=92705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531263.641:19252): pid=92704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92705 suid=74 rport=53580 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531263.641:19253): pid=92704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92705 suid=74 rport=53580 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531263.719:19254): pid=92704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531263.719:19255): pid=92704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531263.753:19256): pid=92704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531263.753:19257): pid=92704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92705 suid=74 rport=53580 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531263.755:19258): pid=92704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531263.755:19259): pid=92704 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=74 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531263.755:19259): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffddec37600 a2=4 a3=3e8 items=0 ppid=12358 pid=92704 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=74 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531263.755:19259): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531263.756:19260): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531263.774:19261): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531263.775:19262): pid=92707 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92707 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531263.776:19263): pid=92707 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531263.817:19264): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531263.817:19265): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531263.818:19266): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531263.838:19267): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92707 suid=1000 rport=53580 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531263.839:19268): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531263.840:19269): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531263.840:19270): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531263.841:19271): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531263.841:19272): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531263.841:19273): pid=92704 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531263.860:19274): pid=92731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531263.862:19275): pid=92730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92731 suid=74 rport=53590 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531263.862:19276): pid=92730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92731 suid=74 rport=53590 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531263.937:19277): pid=92730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531263.937:19278): pid=92730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531263.971:19279): pid=92730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531263.971:19280): pid=92730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92731 suid=74 rport=53590 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531263.973:19281): pid=92730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531263.973:19282): pid=92730 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=75 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531263.973:19282): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffeca48c090 a2=4 a3=3e8 items=0 ppid=12358 pid=92730 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=75 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531263.973:19282): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531263.973:19283): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531263.989:19284): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531263.990:19285): pid=92733 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531263.991:19286): pid=92733 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531264.032:19287): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531264.032:19288): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531264.033:19289): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92734 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531264.082:19290): pid=92734 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531264.082:19291): pid=92734 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531264.082:19292): pid=92734 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531264.085:19293): pid=92734 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531264.258:19294): prog-id=633 op=LOAD
type=SYSCALL msg=audit(1748531264.258:19294): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=92769 pid=92781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531264.258:19294): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373036613033643863343062636366313736333763303361
type=BPF msg=audit(1748531264.259:19295): prog-id=634 op=LOAD
type=SYSCALL msg=audit(1748531264.259:19295): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=92769 pid=92781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531264.259:19295): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373036613033643863343062636366313736333763303361
type=BPF msg=audit(1748531264.259:19296): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531264.259:19297): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531264.259:19298): prog-id=635 op=LOAD
type=SYSCALL msg=audit(1748531264.259:19298): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=92769 pid=92781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531264.259:19298): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373036613033643863343062636366313736333763303361
type=BPF msg=audit(1748531265.791:19299): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531265.897:19300): pid=92734 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531265.897:19301): pid=92734 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531265.899:19302): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92733 suid=1000 rport=53590 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531265.899:19303): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92733 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531265.901:19304): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531265.901:19305): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531265.901:19306): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531265.901:19307): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531265.901:19308): pid=92730 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=92730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531275.963:19309): pid=93314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93314 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531275.964:19310): pid=93313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93314 suid=74 rport=35340 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531275.964:19311): pid=93313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93314 suid=74 rport=35340 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531276.039:19312): pid=93313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531276.039:19313): pid=93313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531276.074:19314): pid=93313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531276.074:19315): pid=93313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93314 suid=74 rport=35340 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531276.076:19316): pid=93313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531276.076:19317): pid=93313 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=76 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531276.076:19317): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcca97e880 a2=4 a3=3e8 items=0 ppid=12358 pid=93313 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=76 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531276.076:19317): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531276.077:19318): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531276.095:19319): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531276.096:19320): pid=93316 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93316 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531276.097:19321): pid=93316 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531276.139:19322): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531276.139:19323): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531276.140:19324): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93317 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531276.165:19325): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93316 suid=1000 rport=35340 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531276.166:19326): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93316 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531276.168:19327): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531276.169:19328): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531276.169:19329): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531276.169:19330): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531276.170:19331): pid=93313 uid=0 auid=1000 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93313 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531276.185:19332): pid=93336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531276.186:19333): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93336 suid=74 rport=35356 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531276.186:19334): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93336 suid=74 rport=35356 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531276.265:19335): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531276.266:19336): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531276.299:19337): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531276.300:19338): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93336 suid=74 rport=35356 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531276.301:19339): pid=93335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531276.301:19340): pid=93335 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=77 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531276.301:19340): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd08df0290 a2=4 a3=3e8 items=0 ppid=12358 pid=93335 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=77 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531276.301:19340): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531276.302:19341): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531276.317:19342): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531276.318:19343): pid=93338 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531276.320:19344): pid=93338 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531276.361:19345): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531276.361:19346): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531276.362:19347): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93339 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531276.420:19348): pid=93339 uid=1000 auid=1000 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531276.420:19349): pid=93339 uid=1000 auid=1000 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531276.420:19350): pid=93339 uid=1000 auid=1000 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531276.424:19351): pid=93339 uid=1000 auid=1000 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531276.609:19352): prog-id=636 op=LOAD
type=SYSCALL msg=audit(1748531276.609:19352): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7c48 a2=90 a3=0 items=0 ppid=93376 pid=93388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531276.609:19352): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643138636232383233373231656333363033316339633138
type=BPF msg=audit(1748531276.609:19353): prog-id=637 op=LOAD
type=SYSCALL msg=audit(1748531276.609:19353): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001c79d8 a2=90 a3=0 items=0 ppid=93376 pid=93388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531276.609:19353): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643138636232383233373231656333363033316339633138
type=BPF msg=audit(1748531276.609:19354): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531276.609:19355): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531276.609:19356): prog-id=638 op=LOAD
type=SYSCALL msg=audit(1748531276.609:19356): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7eb0 a2=90 a3=0 items=0 ppid=93376 pid=93388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531276.609:19356): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643138636232383233373231656333363033316339633138
type=BPF msg=audit(1748531278.188:19357): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531278.302:19358): pid=93339 uid=1000 auid=1000 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531278.302:19359): pid=93339 uid=1000 auid=1000 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531278.305:19360): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93338 suid=1000 rport=35356 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531278.305:19361): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93338 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531278.306:19362): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531278.307:19363): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531278.307:19364): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531278.307:19365): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531278.307:19366): pid=93335 uid=0 auid=1000 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531288.376:19367): pid=93502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93502 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531288.377:19368): pid=93501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93502 suid=74 rport=39066 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531288.377:19369): pid=93501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93502 suid=74 rport=39066 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531288.453:19370): pid=93501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531288.453:19371): pid=93501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531288.488:19372): pid=93501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531288.489:19373): pid=93501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93502 suid=74 rport=39066 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531288.490:19374): pid=93501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531288.490:19375): pid=93501 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=78 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531288.490:19375): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff44ab1450 a2=4 a3=3e8 items=0 ppid=12358 pid=93501 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=78 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531288.490:19375): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531288.491:19376): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531288.512:19377): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531288.513:19378): pid=93504 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93504 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531288.514:19379): pid=93504 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531288.555:19380): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531288.555:19381): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531288.556:19382): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93505 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531288.574:19383): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531288.574:19384): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531288.575:19385): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93504 suid=1000 rport=39066 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531288.575:19386): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531288.576:19387): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531288.577:19388): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531288.578:19389): pid=93501 uid=0 auid=1000 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93501 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531288.594:19390): pid=93524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531288.595:19391): pid=93523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93524 suid=74 rport=39070 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531288.595:19392): pid=93523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93524 suid=74 rport=39070 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531288.677:19393): pid=93523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531288.677:19394): pid=93523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531288.710:19395): pid=93523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531288.710:19396): pid=93523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93524 suid=74 rport=39070 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531288.712:19397): pid=93523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531288.712:19398): pid=93523 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=79 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531288.712:19398): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe6cfc3690 a2=4 a3=3e8 items=0 ppid=12358 pid=93523 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=79 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531288.712:19398): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531288.713:19399): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531288.727:19400): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531288.728:19401): pid=93526 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531288.729:19402): pid=93526 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531288.772:19403): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531288.772:19404): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531288.773:19405): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531288.822:19406): pid=93527 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531288.822:19407): pid=93527 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531288.823:19408): pid=93527 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531288.825:19409): pid=93527 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531288.974:19410): prog-id=639 op=LOAD
type=SYSCALL msg=audit(1748531288.974:19410): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014fc48 a2=90 a3=0 items=0 ppid=93565 pid=93575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531288.974:19410): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343065333437383264393861636664373734363532393633
type=BPF msg=audit(1748531288.974:19411): prog-id=640 op=LOAD
type=SYSCALL msg=audit(1748531288.974:19411): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00014f9d8 a2=90 a3=0 items=0 ppid=93565 pid=93575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531288.974:19411): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343065333437383264393861636664373734363532393633
type=BPF msg=audit(1748531288.974:19412): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531288.974:19413): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531288.974:19414): prog-id=641 op=LOAD
type=SYSCALL msg=audit(1748531288.974:19414): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014feb0 a2=90 a3=0 items=0 ppid=93565 pid=93575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531288.974:19414): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63343065333437383264393861636664373734363532393633
type=BPF msg=audit(1748531290.473:19415): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531290.583:19416): pid=93527 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531290.584:19417): pid=93527 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.586:19418): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93526 suid=1000 rport=39070 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.587:19419): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93526 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531290.589:19420): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531290.589:19421): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531290.590:19422): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531290.590:19423): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.590:19424): pid=93523 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531290.614:19425): pid=93638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93638 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531290.615:19426): pid=93637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93638 suid=74 rport=39080 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531290.615:19427): pid=93637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93638 suid=74 rport=39080 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531290.690:19428): pid=93637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531290.690:19429): pid=93637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531290.725:19430): pid=93637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531290.726:19431): pid=93637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93638 suid=74 rport=39080 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531290.727:19432): pid=93637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531290.727:19433): pid=93637 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=80 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531290.727:19433): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff5d4e37b0 a2=4 a3=3e8 items=0 ppid=12358 pid=93637 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531290.727:19433): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531290.728:19434): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531290.743:19435): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.744:19436): pid=93640 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531290.745:19437): pid=93640 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531290.786:19438): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531290.786:19439): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.787:19440): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93641 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531290.804:19441): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531290.804:19442): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.804:19443): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93640 suid=1000 rport=39080 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.805:19444): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93640 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531290.806:19445): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531290.807:19446): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.807:19447): pid=93637 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531290.822:19448): pid=93657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531290.823:19449): pid=93656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93657 suid=74 rport=39090 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531290.823:19450): pid=93656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93657 suid=74 rport=39090 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531290.897:19451): pid=93656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531290.897:19452): pid=93656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531290.931:19453): pid=93656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531290.932:19454): pid=93656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93657 suid=74 rport=39090 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531290.933:19455): pid=93656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531290.933:19456): pid=93656 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=81 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531290.933:19456): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff1c83ece0 a2=4 a3=3e8 items=0 ppid=12358 pid=93656 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531290.933:19456): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531290.934:19457): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531290.951:19458): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.952:19459): pid=93659 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531290.953:19460): pid=93659 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531290.995:19461): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531290.995:19462): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531290.996:19463): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531291.048:19464): pid=93660 uid=1000 auid=1000 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531291.048:19465): pid=93660 uid=1000 auid=1000 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636F6E747261696C2D737461747573202D74203135 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531291.049:19466): pid=93660 uid=1000 auid=1000 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531291.051:19467): pid=93660 uid=1000 auid=1000 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531291.242:19468): prog-id=642 op=LOAD
type=SYSCALL msg=audit(1748531291.242:19468): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000221c48 a2=90 a3=0 items=0 ppid=93695 pid=93706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531291.242:19468): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303361303636646630663932326135636266376232373566
type=BPF msg=audit(1748531291.242:19469): prog-id=643 op=LOAD
type=SYSCALL msg=audit(1748531291.242:19469): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0002219d8 a2=90 a3=0 items=0 ppid=93695 pid=93706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531291.242:19469): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303361303636646630663932326135636266376232373566
type=BPF msg=audit(1748531291.242:19470): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531291.242:19471): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531291.242:19472): prog-id=644 op=LOAD
type=SYSCALL msg=audit(1748531291.242:19472): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000221eb0 a2=90 a3=0 items=0 ppid=93695 pid=93706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531291.242:19472): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303361303636646630663932326135636266376232373566
type=BPF msg=audit(1748531292.789:19473): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531292.901:19474): pid=93660 uid=1000 auid=1000 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531292.901:19475): pid=93660 uid=1000 auid=1000 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531292.902:19476): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531292.902:19477): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531292.902:19478): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93659 suid=1000 rport=39090 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531292.903:19479): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93659 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531292.905:19480): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531292.906:19481): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531292.906:19482): pid=93656 uid=0 auid=1000 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531293.052:19483): pid=93856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531293.052:19484): pid=93855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93856 suid=74 rport=39102 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531293.052:19485): pid=93855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=93856 suid=74 rport=39102 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531293.131:19486): pid=93855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531293.131:19487): pid=93855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531293.165:19488): pid=93855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531293.166:19489): pid=93855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93856 suid=74 rport=39102 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531293.167:19490): pid=93855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531293.168:19491): pid=93855 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=82 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531293.168:19491): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcc5e2e500 a2=4 a3=3e8 items=0 ppid=12358 pid=93855 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=82 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531293.168:19491): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531293.169:19492): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531293.184:19493): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531293.185:19494): pid=93858 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531293.186:19495): pid=93858 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531293.227:19496): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531293.227:19497): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531293.228:19498): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531293.280:19499): pid=93872 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531293.280:19500): pid=93872 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=74657374202D66202F726F6F742F2E6B7562652F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531293.281:19501): pid=93872 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531293.283:19502): pid=93872 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531293.286:19503): pid=93872 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531293.286:19504): pid=93872 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531293.320:19505): pid=93859 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531293.320:19506): pid=93859 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=636174202F726F6F742F2E6B7562652F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531293.320:19507): pid=93859 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531293.322:19508): pid=93859 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531293.324:19509): pid=93859 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531293.324:19510): pid=93859 uid=1000 auid=1000 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531293.326:19511): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531293.326:19512): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531293.326:19513): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93858 suid=1000 rport=39102 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531293.326:19514): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93858 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531293.327:19515): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531293.328:19516): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531293.328:19517): pid=93855 uid=0 auid=1000 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93855 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=USER_ACCT msg=audit(1748531293.365:19518): pid=93879 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531293.366:19519): pid=93879 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=63686F776E202D5220313030303A31303030202F686F6D652F726F636B792F2E6B756265 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531293.366:19520): pid=93879 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531293.368:19521): pid=93879 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531293.371:19522): pid=93879 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531293.371:19523): pid=93879 uid=1000 auid=1000 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531293.380:19524): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26452 suid=1000 rport=60718 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531293.380:19525): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531293.381:19526): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531293.381:19527): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531293.382:19528): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531293.382:19529): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531293.382:19530): pid=26449 uid=0 auid=1000 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=26449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1748531303.545:19531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531303.562:19532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531309.695:19533): pid=93894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531309.696:19534): pid=93893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=93894 suid=74 rport=33480 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531309.696:19535): pid=93893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=93894 suid=74 rport=33480 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531309.755:19536): pid=93893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531309.755:19537): pid=93893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531309.786:19538): pid=93893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531309.787:19539): pid=93893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93894 suid=74 rport=33480 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531309.789:19540): pid=93893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531309.789:19541): pid=93893 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=83 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531309.789:19541): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffa23c8d00 a2=4 a3=3e8 items=0 ppid=12358 pid=93893 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=83 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531309.789:19541): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531309.790:19542): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748531309.815:19543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531309.850:19544): pid=93897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1748531309.850:19545): pid=93897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1748531309.850:19546): pid=93897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531309.851:19547): pid=93897 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=84 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531309.851:19547): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc018d9bf0 a2=4 a3=3e8 items=0 ppid=1 pid=93897 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=84 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531309.851:19547): proctitle="(systemd)"
type=USER_START msg=audit(1748531309.852:19548): pid=93897 uid=0 auid=1000 ses=84 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748531310.001:19549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531310.011:19550): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531310.012:19551): pid=93906 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531310.013:19552): pid=93906 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531310.055:19553): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531310.055:19554): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531310.056:19555): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531310.556:19556): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531310.556:19557): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531310.556:19558): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93906 suid=1000 rport=33480 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531310.557:19559): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531310.558:19560): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531310.558:19561): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531310.559:19562): pid=93893 uid=0 auid=1000 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531310.575:19563): pid=93924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531310.576:19564): pid=93923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=93924 suid=74 rport=33482 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531310.576:19565): pid=93923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=93924 suid=74 rport=33482 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531310.636:19566): pid=93923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531310.636:19567): pid=93923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531310.669:19568): pid=93923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531310.670:19569): pid=93923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93924 suid=74 rport=33482 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531310.671:19570): pid=93923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531310.671:19571): pid=93923 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=85 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531310.671:19571): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffce2a4d280 a2=4 a3=3e8 items=0 ppid=12358 pid=93923 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=85 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531310.671:19571): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531310.672:19572): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531310.689:19573): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531310.690:19574): pid=93926 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531310.691:19575): pid=93926 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531310.735:19576): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531310.735:19577): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531310.736:19578): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531310.833:19579): pid=93973 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531310.834:19580): pid=93973 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B65722070756C6C206E657875732E677A312E6F70656E73646E2E696F3A353130312F6F70656E73646E2D746573742D746573743A6D61737465722D315F375F365F332D31 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531310.834:19581): pid=93973 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531310.836:19582): pid=93973 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531328.984:19583): pid=93973 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531328.984:19584): pid=93973 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531329.035:19585): pid=94309 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531329.035:19586): pid=94309 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd="/home/rocky/src/opensdn-io/tf-dev-test/tf-sanity/../common/setup_docker.sh" exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531329.036:19587): pid=94309 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531329.038:19588): pid=94309 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531329.113:19589): pid=94309 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531329.113:19590): pid=94309 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531329.459:19591): pid=94333 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531329.460:19592): pid=94333 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=707974686F6E33202D6D2070697020696E7374616C6C206A696E6A6132 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531329.460:19593): pid=94333 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531329.461:19594): pid=94333 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531330.015:19595): pid=94333 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531330.015:19596): pid=94333 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531330.083:19597): pid=94363 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531330.083:19598): pid=94363 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B65722070756C6C206E657875732E677A312E6F70656E73646E2E696F3A353130312F6F70656E73646E2D746573742D746573743A6D61737465722D315F375F365F332D31 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531330.084:19599): pid=94363 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531330.085:19600): pid=94363 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531330.216:19601): pid=94363 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531330.216:19602): pid=94363 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531330.253:19603): pid=94374 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531330.253:19604): pid=94374 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B657220637265617465202D2D6E616D652054344F7835686D326F35206E657875732E677A312E6F70656E73646E2E696F3A353130312F6F70656E73646E2D746573742D746573743A6D61737465722D315F375F365F332D31 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531330.254:19605): pid=94374 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531330.255:19606): pid=94374 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531332.062:19607): pid=94374 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531332.062:19608): pid=94374 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531332.102:19609): pid=94601 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531332.102:19610): pid=94601 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B65722063702054344F7835686D326F353A2F636F6E747261696C2D746573742F7465737472756E6E65722E7368202E2F7465737472756E6E65722E7368 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531332.102:19611): pid=94601 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531332.105:19612): pid=94601 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531332.136:19613): pid=94601 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531332.136:19614): pid=94601 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531332.170:19615): pid=94631 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531332.171:19616): pid=94631 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B657220726D2054344F7835686D326F35 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531332.171:19617): pid=94631 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531332.173:19618): pid=94631 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531332.206:19619): pid=94631 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531332.206:19620): pid=94631 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.226:19621): pid=94643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531332.227:19622): pid=94642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=94643 suid=74 rport=51920 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531332.227:19623): pid=94642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=94643 suid=74 rport=51920 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531332.303:19624): pid=94642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531332.303:19625): pid=94642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531332.346:19626): pid=94642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531332.347:19627): pid=94642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=94643 suid=74 rport=51920 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531332.348:19628): pid=94642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531332.349:19629): pid=94642 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=86 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531332.349:19629): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe97219f70 a2=4 a3=3e8 items=0 ppid=12358 pid=94642 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=86 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531332.349:19629): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531332.350:19630): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531332.368:19631): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.369:19632): pid=94669 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531332.370:19633): pid=94669 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531332.412:19634): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531332.412:19635): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.413:19636): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94671 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531332.484:19637): pid=94671 uid=1000 auid=1000 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531332.484:19638): pid=94671 uid=1000 auid=1000 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D6378206C73202D6C61202F6574632F6B756265726E65746573203B206C73202D6C61202E6B756265 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531332.485:19639): pid=94671 uid=1000 auid=1000 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531332.487:19640): pid=94671 uid=1000 auid=1000 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531332.495:19641): pid=94671 uid=1000 auid=1000 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531332.495:19642): pid=94671 uid=1000 auid=1000 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.497:19643): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=94669 suid=1000 rport=51920 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.498:19644): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94669 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531332.499:19645): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531332.499:19646): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531332.499:19647): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531332.500:19648): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.500:19649): pid=94642 uid=0 auid=1000 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531332.519:19650): pid=94696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531332.522:19651): pid=94695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=94696 suid=74 rport=51936 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531332.522:19652): pid=94695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=94696 suid=74 rport=51936 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531332.600:19653): pid=94695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531332.600:19654): pid=94695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531332.635:19655): pid=94695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531332.636:19656): pid=94695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=94696 suid=74 rport=51936 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531332.638:19657): pid=94695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531332.638:19658): pid=94695 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=87 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531332.638:19658): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd3e65ff90 a2=4 a3=3e8 items=0 ppid=12358 pid=94695 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=87 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531332.638:19658): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531332.639:19659): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531332.658:19660): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.659:19661): pid=94698 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531332.660:19662): pid=94698 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531332.701:19663): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531332.701:19664): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.702:19665): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94702 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531332.761:19666): pid=94702 uid=1000 auid=1000 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531332.761:19667): pid=94702 uid=1000 auid=1000 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=62617368202D6378206370202D66202F6574632F6B756265726E657465732F61646D696E2E636F6E66202F746D702F6B7562655F636F6E6669672026262063686D6F6420363434202F746D702F6B7562655F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531332.761:19668): pid=94702 uid=1000 auid=1000 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531332.763:19669): pid=94702 uid=1000 auid=1000 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531332.769:19670): pid=94702 uid=1000 auid=1000 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531332.770:19671): pid=94702 uid=1000 auid=1000 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531332.771:19672): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531332.771:19673): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.771:19674): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=94698 suid=1000 rport=51936 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.772:19675): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531332.773:19676): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531332.773:19677): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531332.774:19678): pid=94695 uid=0 auid=1000 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=94695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=USER_ACCT msg=audit(1748531332.928:19679): pid=94725 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531332.928:19680): pid=94725 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B6572202D76 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531332.928:19681): pid=94725 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531332.930:19682): pid=94725 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531332.945:19683): pid=94725 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531332.945:19684): pid=94725 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531332.991:19685): pid=94742 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531332.991:19686): pid=94742 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B657220696D61676573206E657875732E677A312E6F70656E73646E2E696F3A353130312F6F70656E73646E2D746573742D74657374 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531332.991:19687): pid=94742 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531332.993:19688): pid=94742 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531333.033:19689): pid=94742 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531333.033:19690): pid=94742 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531333.084:19691): pid=94764 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531333.084:19692): pid=94764 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531333.086:19693): pid=94764 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531333.087:19694): pid=94764 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531333.253:19695): prog-id=645 op=LOAD
type=SYSCALL msg=audit(1748531333.253:19695): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000241c48 a2=90 a3=0 items=0 ppid=94816 pid=94831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531333.253:19695): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31646565353137356564366561653961303337316262626237
type=BPF msg=audit(1748531333.254:19696): prog-id=646 op=LOAD
type=SYSCALL msg=audit(1748531333.254:19696): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c0002419d8 a2=90 a3=0 items=0 ppid=94816 pid=94831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531333.254:19696): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31646565353137356564366561653961303337316262626237
type=BPF msg=audit(1748531333.254:19697): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531333.254:19698): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531333.254:19699): prog-id=647 op=LOAD
type=SYSCALL msg=audit(1748531333.254:19699): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000241eb0 a2=90 a3=0 items=0 ppid=94816 pid=94831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531333.254:19699): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31646565353137356564366561653961303337316262626237
type=CRYPTO_KEY_USER msg=audit(1748531344.991:19700): pid=95101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531344.991:19701): pid=95099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=95101 suid=74 rport=43514 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531344.992:19702): pid=95099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=95101 suid=74 rport=43514 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531345.049:19703): pid=95099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531345.049:19704): pid=95099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531345.077:19705): pid=95099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531345.078:19706): pid=95099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=95101 suid=74 rport=43514 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531345.079:19707): pid=95099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531345.080:19708): pid=95099 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=88 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531345.080:19708): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffed9433a20 a2=4 a3=3e8 items=0 ppid=12358 pid=95099 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=88 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531345.080:19708): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531345.081:19709): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531345.102:19710): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531345.103:19711): pid=95104 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531345.104:19712): pid=95104 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531345.147:19713): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531345.147:19714): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531345.149:19715): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531345.221:19716): pid=95105 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531345.221:19717): pid=95105 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531345.222:19718): pid=95105 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531345.224:19719): pid=95105 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531345.247:19720): prog-id=648 op=LOAD
type=BPF msg=audit(1748531345.247:19721): prog-id=649 op=LOAD
type=SERVICE_START msg=audit(1748531345.463:19722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531345.488:19723): pid=95105 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531345.489:19724): pid=95105 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531345.490:19725): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531345.490:19726): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531345.532:19727): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531345.532:19728): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531345.533:19729): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531345.586:19730): pid=95144 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531345.586:19731): pid=95144 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65202D66 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531345.587:19732): pid=95144 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531345.589:19733): pid=95144 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531345.618:19734): pid=95144 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531345.620:19735): pid=95144 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531345.621:19736): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531345.621:19737): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531345.664:19738): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531345.664:19739): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531345.665:19740): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95184 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531345.720:19741): pid=95184 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531345.720:19742): pid=95184 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B657220707320323E2F6465762F6E756C6C20207C2067726570202D7620222F70617573655C7C2F7573722F62696E2F706F645C7C6E6F76615F6170695F5C7C636F6E747261696C2E2A696E69745C7C696E69742E2A636F6E747261696C5C7C70726F766973696F6E65725C7C706C6163656D656E742220207C2061776B20277B7072696E7420244E467D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531345.721:19743): pid=95184 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531345.722:19744): pid=95184 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531345.804:19745): pid=95184 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531345.804:19746): pid=95184 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531345.805:19747): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531345.806:19748): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531345.848:19749): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531345.848:19750): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531345.849:19751): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95233 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531345.901:19752): pid=95233 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531345.901:19753): pid=95233 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531345.902:19754): pid=95233 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531345.903:19755): pid=95233 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531345.934:19756): pid=95233 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531345.934:19757): pid=95233 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531345.935:19758): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531345.935:19759): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531345.979:19760): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531345.979:19761): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531345.980:19762): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95275 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531346.032:19763): pid=95275 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531346.032:19764): pid=95275 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320676574656E7420686F7374732031302E302E302E313239207C2068656164202D6E2031207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531346.032:19765): pid=95275 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531346.034:19766): pid=95275 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531346.065:19767): pid=95275 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531346.065:19768): pid=95275 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531346.066:19769): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531346.066:19770): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531346.109:19771): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531346.109:19772): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531346.111:19773): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95316 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531346.163:19774): pid=95316 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531346.164:19775): pid=95316 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77206465762076686F737430207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531346.164:19776): pid=95316 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531346.166:19777): pid=95316 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531346.197:19778): pid=95316 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531346.198:19779): pid=95316 uid=1000 auid=1000 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531346.199:19780): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531346.199:19781): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531346.242:19782): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531346.242:19783): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531346.243:19784): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531346.290:19785): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531346.291:19786): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531346.333:19787): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531346.333:19788): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531346.334:19789): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531346.383:19790): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531346.383:19791): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531346.425:19792): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531346.425:19793): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531346.426:19794): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531346.452:19795): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531346.452:19796): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531346.452:19797): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95104 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531346.452:19798): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=95104 suid=1000 rport=43514 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531346.454:19799): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531346.454:19800): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531346.454:19801): pid=95099 uid=0 auid=1000 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531352.675:19802): pid=95465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531352.676:19803): pid=95464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=95465 suid=74 rport=43530 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531352.676:19804): pid=95464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=95465 suid=74 rport=43530 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531352.732:19805): pid=95464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531352.732:19806): pid=95464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531352.761:19807): pid=95464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531352.761:19808): pid=95464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=95465 suid=74 rport=43530 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531352.763:19809): pid=95464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531352.763:19810): pid=95464 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=89 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531352.763:19810): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd15b89460 a2=4 a3=3e8 items=0 ppid=12358 pid=95464 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=89 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531352.763:19810): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531352.764:19811): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531352.782:19812): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531352.783:19813): pid=95467 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531352.784:19814): pid=95467 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531352.826:19815): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531352.826:19816): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531352.828:19817): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95468 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531352.882:19818): pid=95468 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531352.882:19819): pid=95468 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531352.883:19820): pid=95468 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531352.884:19821): pid=95468 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531352.912:19822): pid=95468 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531352.912:19823): pid=95468 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531352.913:19824): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531352.913:19825): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531352.956:19826): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531352.956:19827): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531352.957:19828): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95503 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531353.009:19829): pid=95503 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531353.009:19830): pid=95503 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65202D66 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531353.009:19831): pid=95503 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531353.011:19832): pid=95503 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.041:19833): pid=95503 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531353.041:19834): pid=95503 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.042:19835): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531353.042:19836): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531353.084:19837): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531353.084:19838): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531353.085:19839): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95538 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531353.139:19840): pid=95538 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531353.139:19841): pid=95538 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B657220707320323E2F6465762F6E756C6C20207C2067726570202D7620222F70617573655C7C2F7573722F62696E2F706F645C7C6E6F76615F6170695F5C7C636F6E747261696C2E2A696E69745C7C696E69742E2A636F6E747261696C5C7C70726F766973696F6E65725C7C706C6163656D656E742220207C2061776B20277B7072696E7420244E467D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531353.140:19842): pid=95538 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531353.141:19843): pid=95538 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.215:19844): pid=95538 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531353.215:19845): pid=95538 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.216:19846): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531353.216:19847): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531353.260:19848): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531353.260:19849): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531353.261:19850): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95584 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531353.323:19851): pid=95584 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531353.323:19852): pid=95584 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531353.323:19853): pid=95584 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531353.325:19854): pid=95584 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.361:19855): pid=95584 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531353.361:19856): pid=95584 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.362:19857): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531353.362:19858): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531353.405:19859): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531353.405:19860): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531353.406:19861): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95622 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531353.460:19862): pid=95622 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531353.460:19863): pid=95622 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320676574656E7420686F7374732031302E302E302E313239207C2068656164202D6E2031207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531353.460:19864): pid=95622 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531353.461:19865): pid=95622 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.492:19866): pid=95622 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531353.492:19867): pid=95622 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.493:19868): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531353.493:19869): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531353.536:19870): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531353.536:19871): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531353.537:19872): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531353.593:19873): pid=95660 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531353.593:19874): pid=95660 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77206465762076686F737430207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531353.593:19875): pid=95660 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531353.595:19876): pid=95660 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.626:19877): pid=95660 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531353.627:19878): pid=95660 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531353.628:19879): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531353.628:19880): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531353.672:19881): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531353.672:19882): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531353.673:19883): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531353.719:19884): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531353.719:19885): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531353.762:19886): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531353.762:19887): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531353.763:19888): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95731 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531353.811:19889): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531353.811:19890): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531354.180:19891): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531354.180:19892): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531354.181:19893): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95767 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531354.225:19894): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531354.225:19895): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531354.268:19896): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531354.268:19897): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531354.269:19898): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95800 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531354.318:19899): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531354.318:19900): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531354.361:19901): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531354.361:19902): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531354.362:19903): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531354.411:19904): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531354.411:19905): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531354.454:19906): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531354.454:19907): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531354.455:19908): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531354.510:19909): pid=95868 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531354.511:19910): pid=95868 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276772657020225E5B20095D2A636C75737465725F70726F6A65637422202F6574632F636F6E747261696C2F636F6E747261696C2D6B756265726E657465732E636F6E6627 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531354.511:19911): pid=95868 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531354.512:19912): pid=95868 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531354.616:19913): pid=95868 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531354.616:19914): pid=95868 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531354.618:19915): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531354.618:19916): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531354.665:19917): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531354.665:19918): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531354.667:19919): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531354.727:19920): pid=95934 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531354.727:19921): pid=95934 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276E657473746174202D616E7470207C2067726570203A38313038207C2067726570204C495354454E27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531354.727:19922): pid=95934 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531354.731:19923): pid=95934 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531354.852:19924): pid=95934 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531354.852:19925): pid=95934 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531354.854:19926): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531354.854:19927): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=NETFILTER_CFG msg=audit(1748531354.965:19928): table=filter family=2 entries=50 op=xt_replace pid=96022 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531354.965:19928): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562be4696290 items=0 ppid=26202 pid=96022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531354.965:19928): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531354.967:19929): table=nat family=2 entries=103 op=xt_replace pid=96022 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531354.967:19929): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562be46a75a0 items=0 ppid=26202 pid=96022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531354.967:19929): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531355.015:19930): table=filter family=2 entries=51 op=xt_replace pid=96044 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531355.015:19930): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5572d214a360 items=0 ppid=26202 pid=96044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531355.015:19930): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531355.016:19931): table=nat family=2 entries=103 op=xt_replace pid=96044 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531355.016:19931): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5572d215b710 items=0 ppid=26202 pid=96044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531355.016:19931): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=AVC msg=audit(1748531365.353:19932): avc:  denied  { read } for  pid=96084 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531365.353:19933): avc:  denied  { read } for  pid=96085 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531365.353:19932): avc:  denied  { open } for  pid=96084 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531365.353:19932): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=5593be4a5cf0 a2=80000 a3=0 items=0 ppid=96077 pid=96084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531365.353:19932): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D65373637343500002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D65373637343500002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531365.353:19934): avc:  denied  { getattr } for  pid=96084 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531365.353:19934): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7faf037b7f35 a2=7ffc59128d70 a3=1000 items=0 ppid=96077 pid=96084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531365.353:19934): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D65373637343500002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D65373637343500002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531365.353:19935): avc:  denied  { ioctl } for  pid=96084 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531365.353:19935): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffc59128e70 a3=5593be49f040 items=0 ppid=96077 pid=96084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531365.353:19935): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D65373637343500002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D65373637343500002D2D7072656669783D6E65742F69707636
type=SYSCALL msg=audit(1748531365.353:19933): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=55b61a4b0cf0 a2=80000 a3=0 items=0 ppid=96078 pid=96085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531365.353:19933): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D65373637343500002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D65373637343500002D2D7072656669783D6E65742F69707636
type=SERVICE_START msg=audit(1748531365.731:19936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748531366.009:19937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=AVC msg=audit(1748531370.390:19938): avc:  denied  { read } for  pid=96118 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531370.390:19938): avc:  denied  { open } for  pid=96118 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531370.390:19938): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=558c78439cf0 a2=80000 a3=0 items=0 ppid=96117 pid=96118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.390:19938): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D32323861613100002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D32323861613100002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531370.390:19939): avc:  denied  { getattr } for  pid=96118 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531370.390:19939): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f68a8bb7f35 a2=7ffe66976030 a3=1000 items=0 ppid=96117 pid=96118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.390:19939): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D32323861613100002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D32323861613100002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531370.390:19940): avc:  denied  { ioctl } for  pid=96118 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531370.390:19940): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffe66976130 a3=558c78433040 items=0 ppid=96117 pid=96118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.390:19940): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D32323861613100002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D32323861613100002D2D7072656669783D6E65742F69707636
type=BPF msg=audit(1748531370.496:19941): prog-id=650 op=LOAD
type=BPF msg=audit(1748531370.500:19942): prog-id=651 op=LOAD
type=SYSCALL msg=audit(1748531370.500:19942): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=96130 pid=96146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.500:19942): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565663639623364623530376465626661366265336563346636653761
type=BPF msg=audit(1748531370.500:19943): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531370.500:19944): prog-id=652 op=LOAD
type=SYSCALL msg=audit(1748531370.500:19944): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=96130 pid=96146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.500:19944): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565663639623364623530376465626661366265336563346636653761
type=BPF msg=audit(1748531370.500:19945): prog-id=653 op=LOAD
type=SYSCALL msg=audit(1748531370.500:19945): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=96130 pid=96146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.500:19945): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565663639623364623530376465626661366265336563346636653761
type=BPF msg=audit(1748531370.500:19946): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531370.500:19947): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531370.500:19948): prog-id=654 op=LOAD
type=SYSCALL msg=audit(1748531370.500:19948): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=96130 pid=96146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.500:19948): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565663639623364623530376465626661366265336563346636653761
type=BPF msg=audit(1748531370.514:19949): prog-id=655 op=LOAD
type=BPF msg=audit(1748531370.520:19950): prog-id=656 op=LOAD
type=SYSCALL msg=audit(1748531370.520:19950): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=96167 pid=96178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.520:19950): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638333064386331613934616138323235376363393565613931336433
type=BPF msg=audit(1748531370.521:19951): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531370.521:19952): prog-id=657 op=LOAD
type=SYSCALL msg=audit(1748531370.521:19952): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=96167 pid=96178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.521:19952): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638333064386331613934616138323235376363393565613931336433
type=BPF msg=audit(1748531370.522:19953): prog-id=658 op=LOAD
type=SYSCALL msg=audit(1748531370.522:19953): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=96167 pid=96178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.522:19953): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638333064386331613934616138323235376363393565613931336433
type=BPF msg=audit(1748531370.522:19954): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531370.522:19955): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531370.522:19956): prog-id=659 op=LOAD
type=SYSCALL msg=audit(1748531370.522:19956): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=96167 pid=96178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531370.522:19956): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638333064386331613934616138323235376363393565613931336433
type=USER_ACCT msg=audit(1748531375.336:19957): pid=96228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.337:19958): pid=96228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E73206164642076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.339:19959): pid=96228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.342:19960): pid=96228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.345:19961): pid=96228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.345:19962): pid=96228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.368:19963): pid=96230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.369:19964): pid=96230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261206970206C696E6B20736574206C6F207570 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.369:19965): pid=96230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.379:19966): pid=96230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.384:19967): pid=96230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.384:19968): pid=96230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.416:19969): pid=96232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.417:19970): pid=96232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261206970202D6F206C696E6B2073686F772067772D33343537656364612D6235 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.417:19971): pid=96232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.419:19972): pid=96232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.441:19973): pid=96232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.442:19974): pid=96232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.473:19975): pid=96237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.474:19976): pid=96237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206C696E6B20616464207665746833343537656364612D62207479706520766574682070656572206E616D652067772D33343537656364612D6235206E65746E732076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.474:19977): pid=96237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.478:19978): pid=96237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.493:19979): pid=96237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.493:19980): pid=96237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.513:19981): pid=96241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.513:19982): pid=96241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261206970206C696E6B207365742067772D33343537656364612D6235206164647265737320323A38373A62353A63323A66333A6464 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.513:19983): pid=96241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.520:19984): pid=96241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.527:19985): pid=96241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.527:19986): pid=96241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.557:19987): pid=96252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.558:19988): pid=96252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261206970206C696E6B207365742067772D33343537656364612D6235207570 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.558:19989): pid=96252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.559:19990): pid=96252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.561:19991): pid=96252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.562:19992): pid=96252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.587:19993): pid=96254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.589:19994): pid=96254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206C696E6B20736574207665746833343537656364612D62207570 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.589:19995): pid=96254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.590:19996): pid=96254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.602:19997): pid=96254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.603:19998): pid=96254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.618:19999): pid=96256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.618:20000): pid=96256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261206970206164647220666C7573682067772D33343537656364612D6235 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.618:20001): pid=96256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.619:20002): pid=96256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.625:20003): pid=96256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.625:20004): pid=96256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.651:20005): pid=96262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.652:20006): pid=96262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261206970202D342061646472206164642031302E34372E3235352E3234362F3132206272642031302E34372E3235352E3235352073636F706520676C6F62616C206465762067772D33343537656364612D6235 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.658:20007): pid=96262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.665:20008): pid=96262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.670:20009): pid=96262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.670:20010): pid=96262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.685:20011): pid=96266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.689:20012): pid=96266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D3534633134353466663932612073797363746C202D77206E65742E697076342E636F6E662E67772D33343537656364612D62352E72705F66696C7465723D32 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.690:20013): pid=96266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.694:20014): pid=96266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.705:20015): pid=96266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.706:20016): pid=96266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531375.779:20017): pid=96272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531375.779:20018): pid=96272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D35346331343534666639326120726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531375.779:20019): pid=96272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531375.780:20020): pid=96272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531375.785:20021): pid=96272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531375.785:20022): pid=96272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531377.598:20023): pid=96299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531377.598:20024): pid=96299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D35346331343534666639326120726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531377.598:20025): pid=96299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531377.599:20026): pid=96299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531377.602:20027): pid=96299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531377.602:20028): pid=96299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531378.993:20029): pid=96308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531378.993:20030): pid=96308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D35346331343534666639326120726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531378.993:20031): pid=96308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531378.995:20032): pid=96308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531378.998:20033): pid=96308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531378.998:20034): pid=96308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531379.611:20035): prog-id=660 op=LOAD
type=BPF msg=audit(1748531379.611:20036): prog-id=661 op=LOAD
type=SYSCALL msg=audit(1748531379.611:20036): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbad0 a2=90 a3=0 items=0 ppid=96130 pid=96339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531379.611:20036): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366633265646236636235383637353837363037363430633533666239
type=BPF msg=audit(1748531379.612:20037): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531379.612:20038): prog-id=662 op=LOAD
type=SYSCALL msg=audit(1748531379.612:20038): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbc48 a2=90 a3=0 items=0 ppid=96130 pid=96339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531379.612:20038): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366633265646236636235383637353837363037363430633533666239
type=BPF msg=audit(1748531379.612:20039): prog-id=663 op=LOAD
type=SYSCALL msg=audit(1748531379.612:20039): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bb9d8 a2=90 a3=0 items=0 ppid=96130 pid=96339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531379.612:20039): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366633265646236636235383637353837363037363430633533666239
type=BPF msg=audit(1748531379.612:20040): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531379.612:20041): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531379.612:20042): prog-id=664 op=LOAD
type=SYSCALL msg=audit(1748531379.612:20042): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbeb0 a2=90 a3=0 items=0 ppid=96130 pid=96339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531379.612:20042): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366633265646236636235383637353837363037363430633533666239
type=USER_ACCT msg=audit(1748531379.687:20043): pid=96396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531379.687:20044): pid=96396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D35346331343534666639326120726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531379.687:20045): pid=96396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531379.688:20046): pid=96396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531379.691:20047): pid=96396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531379.691:20048): pid=96396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531380.578:20049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531380.604:20050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1748531380.650:20051): table=filter family=2 entries=51 op=xt_replace pid=96441 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531380.650:20051): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5616dc26e080 items=0 ppid=26202 pid=96441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531380.650:20051): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531380.652:20052): table=nat family=2 entries=103 op=xt_replace pid=96441 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531380.652:20052): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5616dc281f50 items=0 ppid=26202 pid=96441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531380.652:20052): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1748531380.686:20053): prog-id=665 op=LOAD
type=BPF msg=audit(1748531380.686:20054): prog-id=666 op=LOAD
type=SYSCALL msg=audit(1748531380.686:20054): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195ad0 a2=90 a3=0 items=0 ppid=96167 pid=96430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531380.686:20054): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161386434396538316166376636306463306337623862323235326232
type=BPF msg=audit(1748531380.687:20055): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531380.687:20056): prog-id=667 op=LOAD
type=SYSCALL msg=audit(1748531380.687:20056): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195c48 a2=90 a3=0 items=0 ppid=96167 pid=96430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531380.687:20056): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161386434396538316166376636306463306337623862323235326232
type=BPF msg=audit(1748531380.687:20057): prog-id=668 op=LOAD
type=SYSCALL msg=audit(1748531380.687:20057): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001959d8 a2=90 a3=0 items=0 ppid=96167 pid=96430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531380.687:20057): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161386434396538316166376636306463306337623862323235326232
type=BPF msg=audit(1748531380.687:20058): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531380.687:20059): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531380.687:20060): prog-id=669 op=LOAD
type=SYSCALL msg=audit(1748531380.687:20060): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195eb0 a2=90 a3=0 items=0 ppid=96167 pid=96430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531380.687:20060): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161386434396538316166376636306463306337623862323235326232
type=NETFILTER_CFG msg=audit(1748531381.583:20061): table=filter family=2 entries=50 op=xt_replace pid=96526 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531381.583:20061): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564c37f37c60 items=0 ppid=26202 pid=96526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531381.583:20061): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531381.585:20062): table=nat family=2 entries=112 op=xt_replace pid=96526 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531381.585:20062): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564c37f4d7d0 items=0 ppid=26202 pid=96526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531381.585:20062): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_STOP msg=audit(1748531384.772:20063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531384.800:20064): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531384.800:20065): prog-id=0 op=UNLOAD
type=AVC msg=audit(1748531386.820:20066): avc:  denied  { read } for  pid=96565 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531386.820:20066): avc:  denied  { open } for  pid=96565 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531386.820:20066): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=55cf7fc2fcf0 a2=80000 a3=0 items=0 ppid=96563 pid=96565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531386.820:20066): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D30353032343600002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D30353032343600002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531386.820:20067): avc:  denied  { getattr } for  pid=96565 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531386.820:20067): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f0f463b7f35 a2=7ffccdd75030 a3=1000 items=0 ppid=96563 pid=96565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531386.820:20067): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D30353032343600002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D30353032343600002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531386.820:20068): avc:  denied  { ioctl } for  pid=96565 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531386.820:20068): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffccdd75130 a3=55cf7fc29040 items=0 ppid=96563 pid=96565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531386.820:20068): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D30353032343600002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D30353032343600002D2D7072656669783D6E65742F69707636
type=SERVICE_START msg=audit(1748531387.123:20069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748531387.292:20070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531391.903:20071): prog-id=670 op=LOAD
type=BPF msg=audit(1748531391.904:20072): prog-id=671 op=LOAD
type=SYSCALL msg=audit(1748531391.904:20072): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c1ad0 a2=90 a3=0 items=0 ppid=96806 pid=96819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531391.904:20072): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065356562633936333131313661373232383733333666383533653233
type=BPF msg=audit(1748531391.904:20073): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531391.904:20074): prog-id=672 op=LOAD
type=SYSCALL msg=audit(1748531391.904:20074): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c1c48 a2=90 a3=0 items=0 ppid=96806 pid=96819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531391.904:20074): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065356562633936333131313661373232383733333666383533653233
type=BPF msg=audit(1748531391.905:20075): prog-id=673 op=LOAD
type=SYSCALL msg=audit(1748531391.905:20075): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001c19d8 a2=90 a3=0 items=0 ppid=96806 pid=96819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531391.905:20075): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065356562633936333131313661373232383733333666383533653233
type=BPF msg=audit(1748531391.905:20076): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531391.905:20077): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531391.905:20078): prog-id=674 op=LOAD
type=SYSCALL msg=audit(1748531391.905:20078): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001c1eb0 a2=90 a3=0 items=0 ppid=96806 pid=96819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531391.905:20078): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065356562633936333131313661373232383733333666383533653233
type=BPF msg=audit(1748531395.316:20079): prog-id=675 op=LOAD
type=BPF msg=audit(1748531395.316:20080): prog-id=676 op=LOAD
type=SYSCALL msg=audit(1748531395.316:20080): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbad0 a2=90 a3=0 items=0 ppid=96806 pid=97103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531395.316:20080): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635653332376137636233656634373263643537623530376530323163
type=BPF msg=audit(1748531395.317:20081): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531395.317:20082): prog-id=677 op=LOAD
type=SYSCALL msg=audit(1748531395.317:20082): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbc48 a2=90 a3=0 items=0 ppid=96806 pid=97103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531395.317:20082): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635653332376137636233656634373263643537623530376530323163
type=BPF msg=audit(1748531395.317:20083): prog-id=678 op=LOAD
type=SYSCALL msg=audit(1748531395.317:20083): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bb9d8 a2=90 a3=0 items=0 ppid=96806 pid=97103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531395.317:20083): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635653332376137636233656634373263643537623530376530323163
type=BPF msg=audit(1748531395.317:20084): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531395.317:20085): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531395.317:20086): prog-id=679 op=LOAD
type=SYSCALL msg=audit(1748531395.317:20086): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbeb0 a2=90 a3=0 items=0 ppid=96806 pid=97103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531395.317:20086): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635653332376137636233656634373263643537623530376530323163
type=SERVICE_STOP msg=audit(1748531398.324:20087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531398.352:20088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531427.589:20089): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531427.589:20090): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531427.655:20091): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531427.655:20092): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1748531433.875:20093): pid=97358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531433.875:20094): pid=97358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D35346331343534666639326120726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531433.875:20095): pid=97358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531433.876:20096): pid=97358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531433.879:20097): pid=97358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531433.879:20098): pid=97358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531435.319:20099): pid=97367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531435.320:20100): pid=97367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D35346331343534666639326120726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531435.320:20101): pid=97367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531435.321:20102): pid=97367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531435.323:20103): pid=97367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531435.323:20104): pid=97367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531435.879:20105): pid=97378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531435.879:20106): pid=97378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D35346331343534666639326120726F757465206164642064656661756C742067772031302E34372E3235352E323534 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531435.879:20107): pid=97378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531435.880:20108): pid=97378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531435.882:20109): pid=97378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531435.882:20110): pid=97378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531436.394:20111): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531436.394:20112): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1748531436.400:20113): table=filter family=2 entries=50 op=xt_replace pid=97424 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531436.400:20113): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56204a617c60 items=0 ppid=26202 pid=97424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531436.400:20113): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531436.403:20114): table=nat family=2 entries=117 op=xt_replace pid=97424 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531436.403:20114): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56204a62d3e0 items=0 ppid=26202 pid=97424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531436.403:20114): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=USER_ACCT msg=audit(1748531436.433:20115): pid=97439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531436.433:20116): pid=97439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D35346331343534666639326120726F7574652064656C2064656661756C74 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531436.434:20117): pid=97439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531436.435:20118): pid=97439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531436.437:20119): pid=97439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531436.437:20120): pid=97439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531436.451:20121): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531436.451:20122): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1748531436.455:20123): pid=97455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531436.455:20124): pid=97455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261206970202D6F202D64206C696E6B206C697374 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531436.455:20125): pid=97455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531436.456:20126): pid=97455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531436.459:20127): pid=97455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531436.459:20128): pid=97455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531436.470:20129): pid=97469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531436.470:20130): pid=97469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E7320657865632076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261206970206C696E6B2064656C6574652067772D33343537656364612D6235 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531436.470:20131): pid=97469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531436.471:20132): pid=97469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531436.483:20133): pid=97469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531436.483:20134): pid=97469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531436.498:20135): pid=97486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1748531436.499:20136): pid=97486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6970206E65746E732064656C6574652076726F757465722D38613833623564372D633865632D343364382D613332392D3566643062316537363235373A31656464376439382D386434322D346435342D393834652D353463313435346666393261 terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1748531436.499:20137): pid=97486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531436.503:20138): pid=97486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531436.506:20139): pid=97486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1748531436.506:20140): pid=97486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/console res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1748531436.690:20141): table=filter family=2 entries=50 op=xt_replace pid=97525 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531436.690:20141): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c515d75c60 items=0 ppid=26202 pid=97525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531436.690:20141): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531436.692:20142): table=nat family=2 entries=112 op=xt_replace pid=97525 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531436.692:20142): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c515d8ab80 items=0 ppid=26202 pid=97525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531436.692:20142): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531437.719:20143): table=filter family=2 entries=50 op=xt_replace pid=97559 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531437.719:20143): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d29246cc60 items=0 ppid=26202 pid=97559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531437.719:20143): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531437.721:20144): table=nat family=2 entries=112 op=xt_replace pid=97559 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531437.721:20144): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d292481ad0 items=0 ppid=26202 pid=97559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531437.721:20144): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1748531441.426:20145): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531441.426:20146): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1748531441.434:20147): table=filter family=2 entries=50 op=xt_replace pid=97597 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531441.434:20147): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562874d72290 items=0 ppid=26202 pid=97597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531441.434:20147): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531441.437:20148): table=nat family=2 entries=112 op=xt_replace pid=97597 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531441.437:20148): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562874d84440 items=0 ppid=26202 pid=97597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531441.437:20148): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1748531441.489:20149): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531441.489:20150): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1748531441.688:20151): table=filter family=2 entries=51 op=xt_replace pid=97686 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531441.688:20151): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562db3e24360 items=0 ppid=26202 pid=97686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531441.688:20151): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531441.690:20152): table=nat family=2 entries=103 op=xt_replace pid=97686 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531441.690:20152): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562db3e35760 items=0 ppid=26202 pid=97686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531441.690:20152): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531442.720:20153): table=filter family=2 entries=51 op=xt_replace pid=97708 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531442.720:20153): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561863f9a360 items=0 ppid=26202 pid=97708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531442.720:20153): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531442.722:20154): table=nat family=2 entries=103 op=xt_replace pid=97708 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531442.722:20154): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561863fab760 items=0 ppid=26202 pid=97708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531442.722:20154): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=USER_LOGIN msg=audit(1748531446.425:20155): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531446.425:20156): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531446.428:20157): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=97790 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=BPF msg=audit(1748531446.472:20158): prog-id=680 op=LOAD
type=BPF msg=audit(1748531446.472:20159): prog-id=681 op=LOAD
type=SERVICE_START msg=audit(1748531446.695:20160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531446.721:20161): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531446.721:20162): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531446.763:20163): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531446.763:20164): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531446.765:20165): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=97824 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531446.814:20166): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531446.815:20167): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531446.857:20168): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531446.857:20169): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531446.859:20170): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=97858 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531446.907:20171): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531446.907:20172): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531453.374:20173): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531453.374:20174): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531453.375:20175): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=98249 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531453.452:20176): pid=98249 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531453.452:20177): pid=98249 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276772657020225E5B20095D2A636C75737465725F70726F6A65637422202F6574632F636F6E747261696C2F636F6E747261696C2D6B756265726E657465732E636F6E6627 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531453.453:20178): pid=98249 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531453.457:20179): pid=98249 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531453.605:20180): pid=98249 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531453.605:20181): pid=98249 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531453.607:20182): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531453.607:20183): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531453.667:20184): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531453.667:20185): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531453.668:20186): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=98399 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531453.738:20187): pid=98399 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531453.738:20188): pid=98399 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276E657473746174202D616E7470207C2067726570203A38313038207C2067726570204C495354454E27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531453.739:20189): pid=98399 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531453.743:20190): pid=98399 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531453.898:20191): pid=98399 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531453.898:20192): pid=98399 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531453.905:20193): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531453.905:20194): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531453.944:20195): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531453.944:20196): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531453.945:20197): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=98493 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531454.019:20198): pid=98493 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531454.019:20199): pid=98493 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276772657020225E5B20095D2A636C75737465725F70726F6A65637422202F6574632F636F6E747261696C2F636F6E747261696C2D6B756265726E657465732E636F6E6627 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531454.020:20200): pid=98493 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531454.023:20201): pid=98493 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531454.179:20202): pid=98493 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531454.179:20203): pid=98493 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531454.181:20204): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531454.181:20205): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531456.206:20206): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531456.206:20207): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531456.208:20208): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=98659 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531456.259:20209): pid=98659 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531456.259:20210): pid=98659 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276772657020225E5B20095D2A636C75737465725F70726F6A65637422202F6574632F636F6E747261696C2F636F6E747261696C2D6B756265726E657465732E636F6E6627 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531456.260:20211): pid=98659 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531456.261:20212): pid=98659 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531456.368:20213): pid=98659 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531456.369:20214): pid=98659 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531456.370:20215): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531456.370:20216): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531458.382:20217): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531458.382:20218): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531458.383:20219): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=98725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531458.438:20220): pid=98725 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531458.439:20221): pid=98725 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B6572206578656320202D2D70726976696C6567656420202D6974206B7562656D616E616765725F6B38735F6B7562656D616E616765725F31202F62696E2F62617368202D632020276772657020225E5B20095D2A636C75737465725F70726F6A65637422202F6574632F636F6E747261696C2F636F6E747261696C2D6B756265726E657465732E636F6E6627 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531458.439:20222): pid=98725 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531458.441:20223): pid=98725 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531458.539:20224): pid=98725 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531458.539:20225): pid=98725 uid=1000 auid=1000 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531458.540:20226): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531458.540:20227): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=AVC msg=audit(1748531473.823:20228): avc:  denied  { read } for  pid=98854 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531473.823:20228): avc:  denied  { open } for  pid=98854 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531473.823:20228): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=55d0f31c3cf0 a2=80000 a3=0 items=0 ppid=98850 pid=98854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531473.823:20228): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D39343363396300002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D39343363396300002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531473.823:20229): avc:  denied  { getattr } for  pid=98854 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531473.823:20229): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f62d7fb7f35 a2=7fff4eee2ab0 a3=1000 items=0 ppid=98850 pid=98854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531473.823:20229): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D39343363396300002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D39343363396300002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531473.823:20230): avc:  denied  { ioctl } for  pid=98854 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531473.823:20230): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7fff4eee2bb0 a3=55d0f31bd040 items=0 ppid=98850 pid=98854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531473.823:20230): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D39343363396300002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D39343363396300002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531473.838:20231): avc:  denied  { read } for  pid=98857 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531473.838:20231): avc:  denied  { open } for  pid=98857 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531473.838:20231): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=5600df33bcf0 a2=80000 a3=0 items=0 ppid=98849 pid=98857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531473.838:20231): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D39343363396300002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D39343363396300002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531473.838:20232): avc:  denied  { getattr } for  pid=98857 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531473.838:20232): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f441d3b7f35 a2=7ffc0f300450 a3=1000 items=0 ppid=98849 pid=98857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531473.838:20232): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D39343363396300002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D39343363396300002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531473.838:20233): avc:  denied  { ioctl } for  pid=98857 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531473.838:20233): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffc0f300550 a3=5600df335040 items=0 ppid=98849 pid=98857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531473.838:20233): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D39343363396300002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D39343363396300002D2D7072656669783D6E65742F69707636
type=SERVICE_START msg=audit(1748531474.157:20234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748531474.355:20235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531478.920:20236): prog-id=682 op=LOAD
type=BPF msg=audit(1748531478.921:20237): prog-id=683 op=LOAD
type=SYSCALL msg=audit(1748531478.921:20237): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000125ad0 a2=90 a3=0 items=0 ppid=98910 pid=98940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531478.921:20237): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434666538626534616238646238366637613130326563646632366135
type=BPF msg=audit(1748531478.921:20238): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531478.921:20239): prog-id=684 op=LOAD
type=SYSCALL msg=audit(1748531478.921:20239): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000125c48 a2=90 a3=0 items=0 ppid=98910 pid=98940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531478.921:20239): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434666538626534616238646238366637613130326563646632366135
type=BPF msg=audit(1748531478.921:20240): prog-id=685 op=LOAD
type=SYSCALL msg=audit(1748531478.921:20240): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001259d8 a2=90 a3=0 items=0 ppid=98910 pid=98940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531478.921:20240): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434666538626534616238646238366637613130326563646632366135
type=BPF msg=audit(1748531478.922:20241): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531478.922:20242): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531478.922:20243): prog-id=686 op=LOAD
type=BPF msg=audit(1748531478.922:20244): prog-id=687 op=LOAD
type=SYSCALL msg=audit(1748531478.922:20244): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000125eb0 a2=90 a3=0 items=0 ppid=98910 pid=98940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531478.922:20244): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434666538626534616238646238366637613130326563646632366135
type=BPF msg=audit(1748531478.923:20245): prog-id=688 op=LOAD
type=SYSCALL msg=audit(1748531478.923:20245): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3ad0 a2=90 a3=0 items=0 ppid=98929 pid=98947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531478.923:20245): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236326562303565336263376436336438636163623363343537643961
type=BPF msg=audit(1748531478.923:20246): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531478.923:20247): prog-id=689 op=LOAD
type=SYSCALL msg=audit(1748531478.923:20247): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3c48 a2=90 a3=0 items=0 ppid=98929 pid=98947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531478.923:20247): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236326562303565336263376436336438636163623363343537643961
type=BPF msg=audit(1748531478.923:20248): prog-id=690 op=LOAD
type=SYSCALL msg=audit(1748531478.923:20248): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a39d8 a2=90 a3=0 items=0 ppid=98929 pid=98947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531478.923:20248): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236326562303565336263376436336438636163623363343537643961
type=BPF msg=audit(1748531478.923:20249): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531478.923:20250): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531478.923:20251): prog-id=691 op=LOAD
type=SYSCALL msg=audit(1748531478.923:20251): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001a3eb0 a2=90 a3=0 items=0 ppid=98929 pid=98947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531478.923:20251): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236326562303565336263376436336438636163623363343537643961
type=BPF msg=audit(1748531480.053:20252): prog-id=692 op=LOAD
type=BPF msg=audit(1748531480.053:20253): prog-id=693 op=LOAD
type=SYSCALL msg=audit(1748531480.053:20253): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b3ad0 a2=90 a3=0 items=0 ppid=98910 pid=99002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531480.053:20253): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323837356363343062313361356435346465353664316335336366
type=BPF msg=audit(1748531480.054:20254): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531480.054:20255): prog-id=694 op=LOAD
type=SYSCALL msg=audit(1748531480.054:20255): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b3c48 a2=90 a3=0 items=0 ppid=98910 pid=99002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531480.054:20255): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323837356363343062313361356435346465353664316335336366
type=BPF msg=audit(1748531480.054:20256): prog-id=695 op=LOAD
type=SYSCALL msg=audit(1748531480.054:20256): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001b39d8 a2=90 a3=0 items=0 ppid=98910 pid=99002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531480.054:20256): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323837356363343062313361356435346465353664316335336366
type=BPF msg=audit(1748531480.054:20257): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531480.054:20258): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531480.054:20259): prog-id=696 op=LOAD
type=SYSCALL msg=audit(1748531480.054:20259): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001b3eb0 a2=90 a3=0 items=0 ppid=98910 pid=99002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531480.054:20259): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323837356363343062313361356435346465353664316335336366
type=BPF msg=audit(1748531481.024:20260): prog-id=697 op=LOAD
type=BPF msg=audit(1748531481.025:20261): prog-id=698 op=LOAD
type=SYSCALL msg=audit(1748531481.025:20261): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011fad0 a2=90 a3=0 items=0 ppid=98929 pid=99063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531481.025:20261): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139376162623230343738613938633335666136336464623732643836
type=BPF msg=audit(1748531481.025:20262): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531481.025:20263): prog-id=699 op=LOAD
type=SYSCALL msg=audit(1748531481.025:20263): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011fc48 a2=90 a3=0 items=0 ppid=98929 pid=99063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531481.025:20263): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139376162623230343738613938633335666136336464623732643836
type=BPF msg=audit(1748531481.026:20264): prog-id=700 op=LOAD
type=SYSCALL msg=audit(1748531481.026:20264): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00011f9d8 a2=90 a3=0 items=0 ppid=98929 pid=99063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531481.026:20264): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139376162623230343738613938633335666136336464623732643836
type=BPF msg=audit(1748531481.026:20265): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531481.026:20266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531481.026:20267): prog-id=701 op=LOAD
type=SYSCALL msg=audit(1748531481.026:20267): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00011feb0 a2=90 a3=0 items=0 ppid=98929 pid=99063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531481.026:20267): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139376162623230343738613938633335666136336464623732643836
type=AVC msg=audit(1748531484.216:20268): avc:  denied  { read } for  pid=99128 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531484.216:20269): avc:  denied  { open } for  pid=99129 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531484.216:20269): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=55bb3515ecf0 a2=80000 a3=0 items=0 ppid=99121 pid=99129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531484.216:20269): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33626636663000002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33626636663000002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531484.216:20270): avc:  denied  { getattr } for  pid=99129 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531484.216:20270): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f82fb5b7f35 a2=7ffd266b9dd0 a3=1000 items=0 ppid=99121 pid=99129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531484.216:20270): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33626636663000002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33626636663000002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531484.216:20271): avc:  denied  { ioctl } for  pid=99129 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531484.216:20271): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffd266b9ed0 a3=55bb35158040 items=0 ppid=99121 pid=99129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531484.216:20271): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746D70657468302D33626636663000002D2D7072656669783D6E65742F697076342F6E656967682F746D70657468302D33626636663000002D2D7072656669783D6E65742F69707636
type=SYSCALL msg=audit(1748531484.216:20268): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=556574809cf0 a2=80000 a3=0 items=0 ppid=99122 pid=99128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531484.216:20268): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D33626636663000002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D33626636663000002D2D7072656669783D6E65742F69707636
type=SERVICE_STOP msg=audit(1748531488.482:20272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531488.507:20273): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531488.507:20274): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531489.272:20275): prog-id=702 op=LOAD
type=BPF msg=audit(1748531489.273:20276): prog-id=703 op=LOAD
type=SYSCALL msg=audit(1748531489.273:20276): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219ad0 a2=90 a3=0 items=0 ppid=99154 pid=99164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531489.273:20276): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933356364616536653737343839313065363231643964373135343665
type=BPF msg=audit(1748531489.273:20277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531489.273:20278): prog-id=704 op=LOAD
type=SYSCALL msg=audit(1748531489.273:20278): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219c48 a2=90 a3=0 items=0 ppid=99154 pid=99164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531489.273:20278): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933356364616536653737343839313065363231643964373135343665
type=BPF msg=audit(1748531489.273:20279): prog-id=705 op=LOAD
type=SYSCALL msg=audit(1748531489.273:20279): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002199d8 a2=90 a3=0 items=0 ppid=99154 pid=99164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531489.273:20279): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933356364616536653737343839313065363231643964373135343665
type=BPF msg=audit(1748531489.273:20280): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531489.273:20281): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531489.273:20282): prog-id=706 op=LOAD
type=SYSCALL msg=audit(1748531489.273:20282): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219eb0 a2=90 a3=0 items=0 ppid=99154 pid=99164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531489.273:20282): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933356364616536653737343839313065363231643964373135343665
type=BPF msg=audit(1748531490.396:20283): prog-id=707 op=LOAD
type=BPF msg=audit(1748531490.397:20284): prog-id=708 op=LOAD
type=SYSCALL msg=audit(1748531490.397:20284): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000235ad0 a2=90 a3=0 items=0 ppid=99154 pid=99211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531490.397:20284): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134306532646563363061363262633731373135613130613337363638
type=BPF msg=audit(1748531490.397:20285): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531490.397:20286): prog-id=709 op=LOAD
type=SYSCALL msg=audit(1748531490.397:20286): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000235c48 a2=90 a3=0 items=0 ppid=99154 pid=99211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531490.397:20286): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134306532646563363061363262633731373135613130613337363638
type=BPF msg=audit(1748531490.397:20287): prog-id=710 op=LOAD
type=SYSCALL msg=audit(1748531490.397:20287): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002359d8 a2=90 a3=0 items=0 ppid=99154 pid=99211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531490.397:20287): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134306532646563363061363262633731373135613130613337363638
type=BPF msg=audit(1748531490.397:20288): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531490.397:20289): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531490.397:20290): prog-id=711 op=LOAD
type=SYSCALL msg=audit(1748531490.397:20290): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000235eb0 a2=90 a3=0 items=0 ppid=99154 pid=99211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531490.397:20290): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134306532646563363061363262633731373135613130613337363638
type=SERVICE_STOP msg=audit(1748531494.300:20291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531494.327:20292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531494.604:20293): prog-id=712 op=LOAD
type=BPF msg=audit(1748531494.604:20294): prog-id=713 op=LOAD
type=SYSCALL msg=audit(1748531494.604:20294): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfad0 a2=90 a3=0 items=0 ppid=99271 pid=99283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531494.604:20294): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738323762393838646463303564306465373038333161343837656165
type=BPF msg=audit(1748531494.604:20295): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531494.604:20296): prog-id=714 op=LOAD
type=SYSCALL msg=audit(1748531494.604:20296): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfc48 a2=90 a3=0 items=0 ppid=99271 pid=99283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531494.604:20296): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738323762393838646463303564306465373038333161343837656165
type=BPF msg=audit(1748531494.604:20297): prog-id=715 op=LOAD
type=SYSCALL msg=audit(1748531494.604:20297): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bf9d8 a2=90 a3=0 items=0 ppid=99271 pid=99283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531494.604:20297): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738323762393838646463303564306465373038333161343837656165
type=BPF msg=audit(1748531494.605:20298): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531494.605:20299): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531494.605:20300): prog-id=716 op=LOAD
type=SYSCALL msg=audit(1748531494.605:20300): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bfeb0 a2=90 a3=0 items=0 ppid=99271 pid=99283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531494.605:20300): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738323762393838646463303564306465373038333161343837656165
type=BPF msg=audit(1748531495.774:20301): prog-id=717 op=LOAD
type=BPF msg=audit(1748531495.774:20302): prog-id=718 op=LOAD
type=SYSCALL msg=audit(1748531495.774:20302): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbad0 a2=90 a3=0 items=0 ppid=99271 pid=99316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531495.774:20302): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661663064663238656362373538396336343266343364653135333535
type=BPF msg=audit(1748531495.774:20303): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531495.774:20304): prog-id=719 op=LOAD
type=SYSCALL msg=audit(1748531495.774:20304): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbc48 a2=90 a3=0 items=0 ppid=99271 pid=99316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531495.774:20304): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661663064663238656362373538396336343266343364653135333535
type=BPF msg=audit(1748531495.774:20305): prog-id=720 op=LOAD
type=SYSCALL msg=audit(1748531495.774:20305): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bb9d8 a2=90 a3=0 items=0 ppid=99271 pid=99316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531495.774:20305): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661663064663238656362373538396336343266343364653135333535
type=BPF msg=audit(1748531495.774:20306): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531495.774:20307): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531495.775:20308): prog-id=721 op=LOAD
type=SYSCALL msg=audit(1748531495.775:20308): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbeb0 a2=90 a3=0 items=0 ppid=99271 pid=99316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531495.775:20308): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661663064663238656362373538396336343266343364653135333535
type=AVC msg=audit(1748531504.893:20309): avc:  denied  { read } for  pid=99403 comm="systemd-sysctl" name="60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=AVC msg=audit(1748531504.893:20309): avc:  denied  { open } for  pid=99403 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531504.893:20309): arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=55dc9b982cf0 a2=80000 a3=0 items=0 ppid=99401 pid=99403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531504.893:20309): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D64663363333200002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D64663363333200002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531504.893:20310): avc:  denied  { getattr } for  pid=99403 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531504.893:20310): arch=c000003e syscall=262 success=yes exit=0 a0=3 a1=7f2e531b7f35 a2=7ffe5450af40 a3=1000 items=0 ppid=99401 pid=99403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=newfstatat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531504.893:20310): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D64663363333200002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D64663363333200002D2D7072656669783D6E65742F69707636
type=AVC msg=audit(1748531504.893:20311): avc:  denied  { ioctl } for  pid=99403 comm="systemd-sysctl" path="/etc/sysctl.d/60-tf-node-init.conf" dev="vda5" ino=9022828 ioctlcmd=0x5401 scontext=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1748531504.893:20311): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffe5450b040 a3=55dc9b97c040 items=0 ppid=99401 pid=99403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-sysctl" exe="/usr/lib/systemd/systemd-sysctl" subj=system_u:system_r:systemd_sysctl_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=ioctl AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531504.893:20311): proctitle=2F7573722F6C69622F73797374656D642F73797374656D642D73797363746C002D2D7072656669783D6E65742F697076342F636F6E662F746170657468302D64663363333200002D2D7072656669783D6E65742F697076342F6E656967682F746170657468302D64663363333200002D2D7072656669783D6E65742F69707636
type=BPF msg=audit(1748531504.996:20312): prog-id=722 op=LOAD
type=BPF msg=audit(1748531504.997:20313): prog-id=723 op=LOAD
type=SYSCALL msg=audit(1748531504.997:20313): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237ad0 a2=90 a3=0 items=0 ppid=99423 pid=99437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531504.997:20313): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653663303962353635646661396162343330643535373035656166
type=BPF msg=audit(1748531504.997:20314): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531504.997:20315): prog-id=724 op=LOAD
type=SYSCALL msg=audit(1748531504.997:20315): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237c48 a2=90 a3=0 items=0 ppid=99423 pid=99437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531504.997:20315): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653663303962353635646661396162343330643535373035656166
type=BPF msg=audit(1748531504.997:20316): prog-id=725 op=LOAD
type=SYSCALL msg=audit(1748531504.997:20316): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002379d8 a2=90 a3=0 items=0 ppid=99423 pid=99437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531504.997:20316): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653663303962353635646661396162343330643535373035656166
type=BPF msg=audit(1748531504.997:20317): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531504.997:20318): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531504.997:20319): prog-id=726 op=LOAD
type=SYSCALL msg=audit(1748531504.997:20319): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000237eb0 a2=90 a3=0 items=0 ppid=99423 pid=99437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531504.997:20319): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435653663303962353635646661396162343330643535373035656166
type=BPF msg=audit(1748531505.146:20320): prog-id=727 op=LOAD
type=BPF msg=audit(1748531505.146:20321): prog-id=728 op=LOAD
type=SYSCALL msg=audit(1748531505.146:20321): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000197ad0 a2=90 a3=0 items=0 ppid=99423 pid=99474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531505.146:20321): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733386662623430616539383265653531343630393164646362343063
type=BPF msg=audit(1748531505.146:20322): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531505.146:20323): prog-id=729 op=LOAD
type=SYSCALL msg=audit(1748531505.146:20323): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000197c48 a2=90 a3=0 items=0 ppid=99423 pid=99474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531505.146:20323): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733386662623430616539383265653531343630393164646362343063
type=BPF msg=audit(1748531505.146:20324): prog-id=730 op=LOAD
type=SYSCALL msg=audit(1748531505.146:20324): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001979d8 a2=90 a3=0 items=0 ppid=99423 pid=99474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531505.146:20324): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733386662623430616539383265653531343630393164646362343063
type=BPF msg=audit(1748531505.146:20325): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531505.146:20326): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531505.146:20327): prog-id=731 op=LOAD
type=SYSCALL msg=audit(1748531505.146:20327): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000197eb0 a2=90 a3=0 items=0 ppid=99423 pid=99474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531505.146:20327): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733386662623430616539383265653531343630393164646362343063
type=SERVICE_START msg=audit(1748531505.207:20328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1748531505.386:20329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531510.045:20330): prog-id=732 op=LOAD
type=BPF msg=audit(1748531510.046:20331): prog-id=733 op=LOAD
type=SYSCALL msg=audit(1748531510.046:20331): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219ad0 a2=90 a3=0 items=0 ppid=99541 pid=99552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.046:20331): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365393965646437623865656633623961613334356437363230393633
type=BPF msg=audit(1748531510.046:20332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.046:20333): prog-id=734 op=LOAD
type=SYSCALL msg=audit(1748531510.046:20333): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219c48 a2=90 a3=0 items=0 ppid=99541 pid=99552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.046:20333): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365393965646437623865656633623961613334356437363230393633
type=BPF msg=audit(1748531510.046:20334): prog-id=735 op=LOAD
type=SYSCALL msg=audit(1748531510.046:20334): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0002199d8 a2=90 a3=0 items=0 ppid=99541 pid=99552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.046:20334): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365393965646437623865656633623961613334356437363230393633
type=BPF msg=audit(1748531510.046:20335): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.046:20336): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.046:20337): prog-id=736 op=LOAD
type=SYSCALL msg=audit(1748531510.046:20337): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000219eb0 a2=90 a3=0 items=0 ppid=99541 pid=99552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.046:20337): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365393965646437623865656633623961613334356437363230393633
type=BPF msg=audit(1748531510.193:20338): prog-id=737 op=LOAD
type=BPF msg=audit(1748531510.194:20339): prog-id=738 op=LOAD
type=SYSCALL msg=audit(1748531510.194:20339): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbad0 a2=90 a3=0 items=0 ppid=99541 pid=99584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.194:20339): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132656535653831613966383165643066643463303566343163613232
type=BPF msg=audit(1748531510.194:20340): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.194:20341): prog-id=739 op=LOAD
type=SYSCALL msg=audit(1748531510.194:20341): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbc48 a2=90 a3=0 items=0 ppid=99541 pid=99584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.194:20341): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132656535653831613966383165643066643463303566343163613232
type=BPF msg=audit(1748531510.194:20342): prog-id=740 op=LOAD
type=SYSCALL msg=audit(1748531510.194:20342): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bb9d8 a2=90 a3=0 items=0 ppid=99541 pid=99584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.194:20342): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132656535653831613966383165643066643463303566343163613232
type=BPF msg=audit(1748531510.194:20343): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.194:20344): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.194:20345): prog-id=741 op=LOAD
type=SYSCALL msg=audit(1748531510.194:20345): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbeb0 a2=90 a3=0 items=0 ppid=99541 pid=99584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.194:20345): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132656535653831613966383165643066643463303566343163613232
type=BPF msg=audit(1748531510.276:20346): prog-id=742 op=LOAD
type=BPF msg=audit(1748531510.280:20347): prog-id=743 op=LOAD
type=SYSCALL msg=audit(1748531510.280:20347): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199ad0 a2=90 a3=0 items=0 ppid=99618 pid=99628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.280:20347): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566653066333661663134626237306132656663303564303334393233
type=BPF msg=audit(1748531510.282:20348): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.282:20349): prog-id=744 op=LOAD
type=SYSCALL msg=audit(1748531510.282:20349): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199c48 a2=90 a3=0 items=0 ppid=99618 pid=99628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.282:20349): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566653066333661663134626237306132656663303564303334393233
type=BPF msg=audit(1748531510.282:20350): prog-id=745 op=LOAD
type=SYSCALL msg=audit(1748531510.282:20350): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001999d8 a2=90 a3=0 items=0 ppid=99618 pid=99628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.282:20350): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566653066333661663134626237306132656663303564303334393233
type=BPF msg=audit(1748531510.282:20351): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.282:20352): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.283:20353): prog-id=746 op=LOAD
type=SYSCALL msg=audit(1748531510.283:20353): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000199eb0 a2=90 a3=0 items=0 ppid=99618 pid=99628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.283:20353): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566653066333661663134626237306132656663303564303334393233
type=BPF msg=audit(1748531510.364:20354): prog-id=747 op=LOAD
type=BPF msg=audit(1748531510.364:20355): prog-id=748 op=LOAD
type=SYSCALL msg=audit(1748531510.364:20355): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00019bad0 a2=90 a3=0 items=0 ppid=99657 pid=99668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.364:20355): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565643131303663313134396562336665663939393135366230353563
type=BPF msg=audit(1748531510.364:20356): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.364:20357): prog-id=749 op=LOAD
type=SYSCALL msg=audit(1748531510.364:20357): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00019bc48 a2=90 a3=0 items=0 ppid=99657 pid=99668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.364:20357): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565643131303663313134396562336665663939393135366230353563
type=BPF msg=audit(1748531510.365:20358): prog-id=750 op=LOAD
type=SYSCALL msg=audit(1748531510.365:20358): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00019b9d8 a2=90 a3=0 items=0 ppid=99657 pid=99668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.365:20358): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565643131303663313134396562336665663939393135366230353563
type=BPF msg=audit(1748531510.365:20359): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.365:20360): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.365:20361): prog-id=751 op=LOAD
type=SYSCALL msg=audit(1748531510.365:20361): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c00019beb0 a2=90 a3=0 items=0 ppid=99657 pid=99668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.365:20361): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565643131303663313134396562336665663939393135366230353563
type=BPF msg=audit(1748531510.460:20362): prog-id=752 op=LOAD
type=BPF msg=audit(1748531510.460:20363): prog-id=753 op=LOAD
type=SYSCALL msg=audit(1748531510.460:20363): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195ad0 a2=90 a3=0 items=0 ppid=99618 pid=99709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.460:20363): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238656534386133613836316362346534353537643531376262326466
type=BPF msg=audit(1748531510.461:20364): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.461:20365): prog-id=754 op=LOAD
type=SYSCALL msg=audit(1748531510.461:20365): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195c48 a2=90 a3=0 items=0 ppid=99618 pid=99709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.461:20365): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238656534386133613836316362346534353537643531376262326466
type=BPF msg=audit(1748531510.461:20366): prog-id=755 op=LOAD
type=SYSCALL msg=audit(1748531510.461:20366): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001959d8 a2=90 a3=0 items=0 ppid=99618 pid=99709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.461:20366): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238656534386133613836316362346534353537643531376262326466
type=BPF msg=audit(1748531510.461:20367): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.461:20368): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.461:20369): prog-id=756 op=LOAD
type=SYSCALL msg=audit(1748531510.461:20369): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000195eb0 a2=90 a3=0 items=0 ppid=99618 pid=99709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.461:20369): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238656534386133613836316362346534353537643531376262326466
type=BPF msg=audit(1748531510.519:20370): prog-id=757 op=LOAD
type=BPF msg=audit(1748531510.519:20371): prog-id=758 op=LOAD
type=SYSCALL msg=audit(1748531510.519:20371): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbad0 a2=90 a3=0 items=0 ppid=99657 pid=99751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.519:20371): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463623762366530393963643439333039363162313335366337616465
type=BPF msg=audit(1748531510.519:20372): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.520:20373): prog-id=759 op=LOAD
type=SYSCALL msg=audit(1748531510.520:20373): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbc48 a2=90 a3=0 items=0 ppid=99657 pid=99751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.520:20373): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463623762366530393963643439333039363162313335366337616465
type=BPF msg=audit(1748531510.520:20374): prog-id=760 op=LOAD
type=SYSCALL msg=audit(1748531510.520:20374): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001bb9d8 a2=90 a3=0 items=0 ppid=99657 pid=99751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.520:20374): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463623762366530393963643439333039363162313335366337616465
type=BPF msg=audit(1748531510.520:20375): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.520:20376): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531510.520:20377): prog-id=761 op=LOAD
type=SYSCALL msg=audit(1748531510.520:20377): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c0001bbeb0 a2=90 a3=0 items=0 ppid=99657 pid=99751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531510.520:20377): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463623762366530393963643439333039363162313335366337616465
type=USER_LOGIN msg=audit(1748531514.149:20378): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531514.149:20379): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531514.151:20380): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=100223 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=BPF msg=audit(1748531514.186:20381): prog-id=762 op=LOAD
type=BPF msg=audit(1748531514.186:20382): prog-id=763 op=LOAD
type=SERVICE_START msg=audit(1748531514.465:20383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531514.487:20384): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531514.487:20385): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531514.529:20386): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531514.529:20387): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531514.531:20388): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=100261 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531514.579:20389): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531514.579:20390): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531514.622:20391): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531514.622:20392): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531514.623:20393): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=100295 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531514.675:20394): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531514.675:20395): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=NETFILTER_CFG msg=audit(1748531514.939:20396): table=filter family=2 entries=51 op=xt_replace pid=100439 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531514.939:20396): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5587fa9b39e0 items=0 ppid=26202 pid=100439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531514.939:20396): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531514.941:20397): table=nat family=2 entries=103 op=xt_replace pid=100439 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531514.941:20397): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5587fa9c46f0 items=0 ppid=26202 pid=100439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531514.941:20397): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531514.991:20398): table=filter family=2 entries=52 op=xt_replace pid=100462 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531514.991:20398): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55589746a770 items=0 ppid=26202 pid=100462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531514.991:20398): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531514.993:20399): table=nat family=2 entries=103 op=xt_replace pid=100462 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531514.993:20399): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55589747d0e0 items=0 ppid=26202 pid=100462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531514.993:20399): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_STOP msg=audit(1748531516.555:20400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.2-org.fedoraproject.SetroubleshootPrivileged@5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531516.607:20401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531544.681:20402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531544.720:20403): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531544.720:20404): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1748531693.874:20405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1748531704.459:20406): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531704.459:20407): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531704.461:20408): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=103336 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=BPF msg=audit(1748531704.498:20409): prog-id=764 op=LOAD
type=BPF msg=audit(1748531704.498:20410): prog-id=765 op=LOAD
type=SERVICE_START msg=audit(1748531704.746:20411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531704.767:20412): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531704.768:20413): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531704.810:20414): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531704.810:20415): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531704.812:20416): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=103370 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531704.861:20417): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531704.861:20418): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531704.905:20419): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531704.905:20420): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531704.906:20421): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=103404 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531704.955:20422): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531704.955:20423): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=BPF msg=audit(1748531705.088:20424): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.088:20425): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.129:20426): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.129:20427): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1748531705.143:20428): table=filter family=2 entries=51 op=xt_replace pid=103526 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531705.143:20428): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5595caa3e360 items=0 ppid=26202 pid=103526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531705.143:20428): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531705.145:20429): table=nat family=2 entries=117 op=xt_replace pid=103526 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531705.145:20429): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5595caa51ea0 items=0 ppid=26202 pid=103526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531705.145:20429): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1748531705.166:20430): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.166:20431): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.213:20432): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.213:20433): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1748531705.230:20434): table=filter family=2 entries=51 op=xt_replace pid=103574 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531705.230:20434): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d24223b9e0 items=0 ppid=26202 pid=103574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531705.230:20434): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531705.231:20435): table=nat family=2 entries=112 op=xt_replace pid=103574 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531705.231:20435): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d24224d460 items=0 ppid=26202 pid=103574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531705.231:20435): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=BPF msg=audit(1748531705.414:20436): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.414:20437): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.420:20438): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.420:20439): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.427:20440): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.427:20441): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.433:20442): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531705.433:20443): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1748531706.276:20444): table=filter family=2 entries=52 op=xt_replace pid=103880 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531706.276:20444): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5592e7ef6ac0 items=0 ppid=26202 pid=103880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531706.276:20444): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531706.277:20445): table=nat family=2 entries=103 op=xt_replace pid=103880 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531706.277:20445): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5592e7f07690 items=0 ppid=26202 pid=103880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531706.277:20445): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531707.314:20446): table=filter family=2 entries=52 op=xt_replace pid=103902 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531707.314:20446): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d6c8a97ac0 items=0 ppid=26202 pid=103902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531707.314:20446): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531707.316:20447): table=nat family=2 entries=103 op=xt_replace pid=103902 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531707.316:20447): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d6c8aa85e0 items=0 ppid=26202 pid=103902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531707.316:20447): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=SERVICE_STOP msg=audit(1748531734.964:20448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531735.009:20449): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.009:20450): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.088:20451): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.088:20452): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.127:20453): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.127:20454): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.127:20455): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.127:20456): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.170:20457): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.170:20458): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.184:20459): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.184:20460): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.192:20461): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.192:20462): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.200:20463): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.200:20464): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.270:20465): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531735.270:20466): prog-id=0 op=UNLOAD
type=NETFILTER_CFG msg=audit(1748531756.532:20467): table=filter family=2 entries=52 op=xt_replace pid=104955 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531756.532:20467): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5557e724fac0 items=0 ppid=26202 pid=104955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531756.532:20467): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531756.546:20468): table=nat family=2 entries=103 op=xt_replace pid=104955 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531756.546:20468): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5557e72606b0 items=0 ppid=26202 pid=104955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531756.546:20468): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531756.651:20469): table=filter family=2 entries=52 op=xt_replace pid=104977 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531756.651:20469): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fbcd2ae770 items=0 ppid=26202 pid=104977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531756.651:20469): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=NETFILTER_CFG msg=audit(1748531756.667:20470): table=nat family=2 entries=103 op=xt_replace pid=104977 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1748531756.667:20470): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fbcd2bf6b0 items=0 ppid=26202 pid=104977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-legacy-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=setsockopt AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531756.667:20470): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273
type=CRYPTO_KEY_USER msg=audit(1748531757.461:20471): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=95467 suid=1000 rport=43530 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531757.462:20472): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95467 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531757.464:20473): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531757.464:20474): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531757.465:20475): pid=95464 uid=0 auid=1000 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=95464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531765.295:20476): pid=105030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531765.300:20477): pid=105028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=105030 suid=74 rport=34518 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531765.300:20478): pid=105028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=105030 suid=74 rport=34518 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531765.411:20479): pid=105028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531765.411:20480): pid=105028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531765.444:20481): pid=105028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531765.445:20482): pid=105028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105030 suid=74 rport=34518 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531765.446:20483): pid=105028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531765.446:20484): pid=105028 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=90 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531765.446:20484): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe169a2750 a2=4 a3=3e8 items=0 ppid=12358 pid=105028 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=90 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531765.446:20484): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531765.447:20485): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531765.464:20486): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531765.465:20487): pid=105033 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531765.466:20488): pid=105033 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531765.508:20489): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531765.508:20490): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531765.510:20491): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531765.566:20492): pid=105034 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531765.566:20493): pid=105034 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531765.567:20494): pid=105034 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531765.570:20495): pid=105034 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531765.592:20496): prog-id=766 op=LOAD
type=BPF msg=audit(1748531765.592:20497): prog-id=767 op=LOAD
type=SERVICE_START msg=audit(1748531765.825:20498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1748531765.851:20499): pid=105034 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531765.852:20500): pid=105034 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531765.854:20501): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531765.854:20502): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531765.897:20503): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531765.897:20504): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531765.898:20505): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105074 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531765.959:20506): pid=105074 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531765.959:20507): pid=105074 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65202D66 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531765.959:20508): pid=105074 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531765.962:20509): pid=105074 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531765.992:20510): pid=105074 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531765.992:20511): pid=105074 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531765.994:20512): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531765.994:20513): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531766.036:20514): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531766.036:20515): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531766.037:20516): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531766.091:20517): pid=105114 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531766.091:20518): pid=105114 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B657220707320323E2F6465762F6E756C6C20207C2067726570202D7620222F70617573655C7C2F7573722F62696E2F706F645C7C6E6F76615F6170695F5C7C636F6E747261696C2E2A696E69745C7C696E69742E2A636F6E747261696C5C7C70726F766973696F6E65725C7C706C6163656D656E742220207C2061776B20277B7072696E7420244E467D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531766.092:20519): pid=105114 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531766.093:20520): pid=105114 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.167:20521): pid=105114 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531766.167:20522): pid=105114 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.168:20523): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531766.168:20524): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531766.210:20525): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531766.210:20526): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531766.211:20527): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531766.266:20528): pid=105163 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531766.266:20529): pid=105163 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531766.266:20530): pid=105163 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531766.268:20531): pid=105163 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.299:20532): pid=105163 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531766.299:20533): pid=105163 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.300:20534): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531766.301:20535): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531766.343:20536): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531766.343:20537): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531766.344:20538): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531766.398:20539): pid=105204 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531766.398:20540): pid=105204 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320676574656E7420686F7374732031302E302E302E313239207C2068656164202D6E2031207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531766.398:20541): pid=105204 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531766.400:20542): pid=105204 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.430:20543): pid=105204 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531766.431:20544): pid=105204 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.432:20545): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531766.432:20546): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531766.475:20547): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531766.475:20548): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531766.476:20549): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105245 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531766.528:20550): pid=105245 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531766.528:20551): pid=105245 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77206465762076686F737430207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531766.528:20552): pid=105245 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531766.530:20553): pid=105245 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.560:20554): pid=105245 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531766.561:20555): pid=105245 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.562:20556): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531766.562:20557): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531766.605:20558): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531766.605:20559): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531766.606:20560): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105286 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531766.652:20561): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531766.652:20562): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531766.694:20563): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531766.694:20564): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531766.696:20565): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105322 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531766.747:20566): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531766.747:20567): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531766.850:20568): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531766.850:20569): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531766.852:20570): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105363 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531766.904:20571): pid=105363 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531766.905:20572): pid=105363 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D63200A2020202020202020202020206966205B202D66202F6574632F6C73622D72656C65617365205D3B207468656E2028636174202F6574632F6C73622D72656C65617365207C206772657020444953545249425F4445534352495054494F4E207C20637574202D6420223D22202D663220290A202020202020202020202020656C73650A20202020202020202020202020202020636174202F6574632F7265646861742D72656C65617365207C2073656420732F5C2846696E616C5C292F2F0A2020202020202020202020206669 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531766.905:20573): pid=105363 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531766.907:20574): pid=105363 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.939:20575): pid=105363 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531766.939:20576): pid=105363 uid=1000 auid=1000 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531766.940:20577): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531766.940:20578): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531766.984:20579): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531766.984:20580): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531766.986:20581): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105404 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531767.033:20582): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531767.033:20583): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531767.076:20584): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531767.076:20585): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531767.078:20586): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105441 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531767.138:20587): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531767.138:20588): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531767.239:20589): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105033 suid=1000 rport=34518 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531767.241:20590): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531767.242:20591): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531767.242:20592): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531767.243:20593): pid=105028 uid=0 auid=1000 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531768.979:20594): pid=105537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105537 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531768.981:20595): pid=105536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=105537 suid=74 rport=34532 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531768.981:20596): pid=105536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=105537 suid=74 rport=34532 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531769.081:20597): pid=105536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531769.081:20598): pid=105536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531769.120:20599): pid=105536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531769.121:20600): pid=105536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105537 suid=74 rport=34532 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531769.123:20601): pid=105536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531769.123:20602): pid=105536 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=91 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531769.123:20602): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd9e6ed730 a2=4 a3=3e8 items=0 ppid=12358 pid=105536 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=91 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531769.123:20602): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531769.124:20603): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531769.141:20604): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531769.142:20605): pid=105540 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105540 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531769.143:20606): pid=105540 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531769.186:20607): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531769.186:20608): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531769.187:20609): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105541 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531769.240:20610): pid=105541 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531769.241:20611): pid=105541 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531769.241:20612): pid=105541 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531769.243:20613): pid=105541 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.274:20614): pid=105541 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531769.274:20615): pid=105541 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.275:20616): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531769.275:20617): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531769.317:20618): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531769.317:20619): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531769.318:20620): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105579 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531769.375:20621): pid=105579 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531769.375:20622): pid=105579 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320686F73746E616D65202D66 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531769.376:20623): pid=105579 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531769.377:20624): pid=105579 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.406:20625): pid=105579 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531769.406:20626): pid=105579 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.408:20627): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531769.408:20628): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531769.454:20629): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531769.454:20630): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531769.456:20631): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105617 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531769.510:20632): pid=105617 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531769.510:20633): pid=105617 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320646F636B657220707320323E2F6465762F6E756C6C20207C2067726570202D7620222F70617573655C7C2F7573722F62696E2F706F645C7C6E6F76615F6170695F5C7C636F6E747261696C2E2A696E69745C7C696E69742E2A636F6E747261696C5C7C70726F766973696F6E65725C7C706C6163656D656E742220207C2061776B20277B7072696E7420244E467D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531769.510:20634): pid=105617 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531769.512:20635): pid=105617 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.581:20636): pid=105617 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531769.581:20637): pid=105617 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.582:20638): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531769.582:20639): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531769.626:20640): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531769.626:20641): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531769.628:20642): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105666 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531769.680:20643): pid=105666 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531769.680:20644): pid=105666 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531769.681:20645): pid=105666 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531769.682:20646): pid=105666 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.715:20647): pid=105666 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531769.715:20648): pid=105666 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.717:20649): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531769.717:20650): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531769.759:20651): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531769.759:20652): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531769.761:20653): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531769.823:20654): pid=105707 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531769.823:20655): pid=105707 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320676574656E7420686F7374732031302E302E302E313239207C2068656164202D6E2031207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531769.824:20656): pid=105707 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531769.825:20657): pid=105707 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.858:20658): pid=105707 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531769.858:20659): pid=105707 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.859:20660): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531769.859:20661): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531769.902:20662): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531769.902:20663): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531769.903:20664): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105748 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531769.953:20665): pid=105748 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531769.954:20666): pid=105748 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320697020616464722073686F77206465762076686F737430207C20677265702027696E6574202E2A2F2E2A206272642027207C2061776B20277B7072696E742024327D27 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531769.954:20667): pid=105748 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531769.955:20668): pid=105748 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.985:20669): pid=105748 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531769.986:20670): pid=105748 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531769.987:20671): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531769.987:20672): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531770.029:20673): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531770.029:20674): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531770.030:20675): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531770.075:20676): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531770.075:20677): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531770.117:20678): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531770.117:20679): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531770.118:20680): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105825 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531770.168:20681): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531770.168:20682): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531770.211:20683): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531770.211:20684): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531770.212:20685): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105862 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531770.257:20686): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531770.257:20687): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531770.300:20688): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531770.300:20689): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531770.301:20690): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105898 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531770.348:20691): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531770.348:20692): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531778.362:20693): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531778.362:20694): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531778.363:20695): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105940 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531778.387:20696): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531778.387:20697): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531778.428:20698): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531778.428:20699): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531778.429:20700): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105953 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531778.487:20701): pid=105953 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531778.487:20702): pid=105953 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320726D202D66202F746D702F2A2A74726163656261636B2A2E6C6F67 exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531778.487:20703): pid=105953 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531778.489:20704): pid=105953 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531778.520:20705): pid=105953 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531778.520:20706): pid=105953 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531778.522:20707): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531778.522:20708): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531778.564:20709): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531778.564:20710): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531778.565:20711): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105991 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531778.619:20712): pid=105991 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531778.619:20713): pid=105991 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=2F62696E2F62617368202D6C202D6320707974686F6E33202F746D702F7365617263682D62742E7079202D70202F746D70202D69202F746D702F69676E6F72655F74726163656261636B732E6A736F6E exe="/usr/bin/sudo" terminal=pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531778.619:20714): pid=105991 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531778.621:20715): pid=105991 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531779.209:20716): pid=105991 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531779.209:20717): pid=105991 uid=1000 auid=1000 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531779.211:20718): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531779.211:20719): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531779.252:20720): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531779.252:20721): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531779.253:20722): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106031 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531779.275:20723): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531779.275:20724): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531779.276:20725): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531779.276:20726): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531779.276:20727): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106044 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531779.297:20728): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531779.297:20729): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGIN msg=audit(1748531779.297:20730): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531779.297:20731): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531779.298:20732): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106057 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531779.322:20733): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531779.322:20734): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531779.322:20735): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105540 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531779.322:20736): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105540 suid=1000 rport=34532 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531779.324:20737): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531779.324:20738): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531779.325:20739): pid=105536 uid=0 auid=1000 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=105536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=BPF msg=audit(1748531781.608:20740): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531782.025:20741): pid=94764 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531782.025:20742): pid=94764 uid=1000 auid=1000 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531782.107:20743): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93926 suid=1000 rport=33482 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531782.107:20744): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93926 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531782.108:20745): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531782.109:20746): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531782.109:20747): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531782.109:20748): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531782.109:20749): pid=93923 uid=0 auid=1000 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=93923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531782.141:20750): pid=106112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531782.142:20751): pid=106111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106112 suid=74 rport=33754 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531782.142:20752): pid=106111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106112 suid=74 rport=33754 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531782.204:20753): pid=106111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531782.205:20754): pid=106111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531782.236:20755): pid=106111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531782.237:20756): pid=106111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106112 suid=74 rport=33754 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531782.238:20757): pid=106111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531782.238:20758): pid=106111 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=92 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531782.238:20758): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdf864bcc0 a2=4 a3=3e8 items=0 ppid=12358 pid=106111 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=92 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531782.238:20758): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531782.239:20759): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531782.258:20760): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531782.259:20761): pid=106114 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106114 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531782.260:20762): pid=106114 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531782.302:20763): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531782.302:20764): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531782.303:20765): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106115 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531782.334:20766): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106114 suid=1000 rport=33754 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531782.335:20767): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531782.336:20768): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531782.336:20769): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531782.337:20770): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531782.337:20771): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531782.337:20772): pid=106111 uid=0 auid=1000 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1748531792.545:20773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531792.563:20774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531808.661:20775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1748531808.697:20776): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531808.697:20777): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1748531809.713:20778): pid=106150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531809.714:20779): pid=106149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106150 suid=74 rport=33772 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531809.714:20780): pid=106149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106150 suid=74 rport=33772 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531809.775:20781): pid=106149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531809.776:20782): pid=106149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531809.807:20783): pid=106149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531809.807:20784): pid=106149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106150 suid=74 rport=33772 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531809.809:20785): pid=106149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531809.809:20786): pid=106149 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=93 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531809.809:20786): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcc8963020 a2=4 a3=3e8 items=0 ppid=12358 pid=106149 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=93 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531809.809:20786): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531809.810:20787): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748531809.839:20788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531809.877:20789): pid=106153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1748531809.877:20790): pid=106153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1748531809.878:20791): pid=106153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531809.878:20792): pid=106153 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=94 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531809.878:20792): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc018d9bf0 a2=4 a3=3e8 items=0 ppid=1 pid=106153 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=94 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531809.878:20792): proctitle="(systemd)"
type=USER_START msg=audit(1748531809.879:20793): pid=106153 uid=0 auid=1000 ses=94 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748531810.036:20794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531810.050:20795): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531810.051:20796): pid=106162 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531810.053:20797): pid=106162 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531810.098:20798): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531810.098:20799): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531810.099:20800): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531810.695:20801): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531810.696:20802): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531810.696:20803): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106162 suid=1000 rport=33772 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531810.696:20804): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106162 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531810.698:20805): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531810.698:20806): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531810.698:20807): pid=106149 uid=0 auid=1000 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531810.715:20808): pid=106197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106197 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531810.716:20809): pid=106196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106197 suid=74 rport=33774 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531810.717:20810): pid=106196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106197 suid=74 rport=33774 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531810.776:20811): pid=106196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531810.776:20812): pid=106196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531810.813:20813): pid=106196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531810.814:20814): pid=106196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106197 suid=74 rport=33774 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531810.815:20815): pid=106196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531810.815:20816): pid=106196 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=95 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531810.815:20816): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc79283760 a2=4 a3=3e8 items=0 ppid=12358 pid=106196 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=95 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531810.815:20816): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531810.816:20817): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531810.834:20818): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531810.835:20819): pid=106217 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531810.836:20820): pid=106217 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531810.879:20821): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531810.879:20822): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531810.880:20823): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106218 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531810.974:20824): pid=106264 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531810.974:20825): pid=106264 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd="/home/rocky/src/opensdn-io/tf-dev-test/deployment-test/../common/setup_docker.sh" exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531810.974:20826): pid=106264 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531810.976:20827): pid=106264 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531811.026:20828): pid=106264 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531811.027:20829): pid=106264 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531811.090:20830): pid=106321 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531811.090:20831): pid=106321 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/rocky" cmd=646F636B65722070756C6C206E657875732E677A312E6F70656E73646E2E696F3A353130312F74662D6465706C6F796D656E742D746573743A6D61737465722D315F375F365F332D31 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531811.090:20832): pid=106321 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531811.092:20833): pid=106321 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531811.240:20834): pid=106321 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531811.240:20835): pid=106321 uid=1000 auid=1000 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531811.242:20836): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106217 suid=1000 rport=33774 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531811.243:20837): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531811.244:20838): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531811.244:20839): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531811.244:20840): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531811.244:20841): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531811.244:20842): pid=106196 uid=0 auid=1000 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531811.271:20843): pid=106353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531811.271:20844): pid=106352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106353 suid=74 rport=33776 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531811.271:20845): pid=106352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106353 suid=74 rport=33776 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531811.332:20846): pid=106352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531811.332:20847): pid=106352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531811.364:20848): pid=106352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531811.364:20849): pid=106352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106353 suid=74 rport=33776 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531811.366:20850): pid=106352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531811.367:20851): pid=106352 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=96 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531811.367:20851): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe3069b420 a2=4 a3=3e8 items=0 ppid=12358 pid=106352 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=96 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531811.367:20851): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531811.368:20852): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531811.386:20853): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531811.387:20854): pid=106361 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106361 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531811.388:20855): pid=106361 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531811.430:20856): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531811.430:20857): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531811.431:20858): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106362 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531811.553:20859): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531811.553:20860): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531811.553:20861): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106361 suid=1000 rport=33776 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531811.554:20862): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106361 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531811.555:20863): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531811.555:20864): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531811.556:20865): pid=106352 uid=0 auid=1000 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=SERVICE_STOP msg=audit(1748531821.792:20866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1748531821.810:20867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531835.077:20868): pid=106799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531835.078:20869): pid=106798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106799 suid=74 rport=33800 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531835.078:20870): pid=106798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106799 suid=74 rport=33800 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531835.137:20871): pid=106798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531835.137:20872): pid=106798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531835.170:20873): pid=106798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531835.171:20874): pid=106798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106799 suid=74 rport=33800 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531835.172:20875): pid=106798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531835.172:20876): pid=106798 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=97 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531835.172:20876): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc78066a90 a2=4 a3=3e8 items=0 ppid=12358 pid=106798 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=97 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531835.172:20876): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531835.173:20877): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748531835.199:20878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531835.235:20879): pid=106802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1748531835.235:20880): pid=106802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1748531835.235:20881): pid=106802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531835.235:20882): pid=106802 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=98 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531835.235:20882): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc018d9bf0 a2=4 a3=3e8 items=0 ppid=1 pid=106802 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=98 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531835.235:20882): proctitle="(systemd)"
type=USER_START msg=audit(1748531835.237:20883): pid=106802 uid=0 auid=1000 ses=98 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="rocky" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky"
type=SERVICE_START msg=audit(1748531835.374:20884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1748531835.384:20885): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.385:20886): pid=106811 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106811 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531835.386:20887): pid=106811 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531835.430:20888): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531835.430:20889): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.431:20890): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106812 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531835.449:20891): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531835.449:20892): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.450:20893): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106811 suid=1000 rport=33800 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.450:20894): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531835.451:20895): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531835.452:20896): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.452:20897): pid=106798 uid=0 auid=1000 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531835.477:20898): pid=106826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531835.478:20899): pid=106825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106826 suid=74 rport=33802 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531835.478:20900): pid=106825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106826 suid=74 rport=33802 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531835.540:20901): pid=106825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531835.540:20902): pid=106825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531835.571:20903): pid=106825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531835.572:20904): pid=106825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106826 suid=74 rport=33802 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531835.573:20905): pid=106825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531835.574:20906): pid=106825 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=99 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531835.574:20906): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffeb973bd60 a2=4 a3=3e8 items=0 ppid=12358 pid=106825 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=99 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531835.574:20906): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531835.574:20907): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531835.590:20908): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.591:20909): pid=106828 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531835.592:20910): pid=106828 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531835.638:20911): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531835.638:20912): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.639:20913): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106830 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.943:20914): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106828 suid=1000 rport=33802 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.943:20915): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531835.945:20916): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531835.945:20917): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_END msg=audit(1748531835.945:20918): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531835.945:20919): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531835.946:20920): pid=106825 uid=0 auid=1000 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106825 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531835.969:20921): pid=106847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531835.970:20922): pid=106844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106847 suid=74 rport=33804 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531835.970:20923): pid=106844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=106847 suid=74 rport=33804 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531836.029:20924): pid=106844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531836.029:20925): pid=106844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ae:fa:7f:d9:b8:d5:af:f6:9e:8b:ef:bd:d3:40:20:24:0b:d0:a4:08:26:68:ad:f8:4d:f1:fc:07:ba:40:a5:df exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531836.062:20926): pid=106844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531836.062:20927): pid=106844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106847 suid=74 rport=33804 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531836.064:20928): pid=106844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531836.064:20929): pid=106844 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=100 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531836.064:20929): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd45f162f0 a2=4 a3=3e8 items=0 ppid=12358 pid=106844 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=100 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531836.064:20929): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531836.065:20930): pid=106844 uid=0 auid=1000 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531836.082:20931): pid=106844 uid=0 auid=1000 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.083:20932): pid=106849 uid=0 auid=1000 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531836.084:20933): pid=106849 uid=0 auid=1000 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.25 addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531836.126:20934): pid=106844 uid=0 auid=1000 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531836.126:20935): pid=106844 uid=0 auid=1000 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.25 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.127:20936): pid=106844 uid=0 auid=1000 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106850 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.233:20937): pid=106940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531836.233:20938): pid=106939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106940 suid=74 rport=33934 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531836.233:20939): pid=106939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106940 suid=74 rport=33934 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1748531836.345:20940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd-kcm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1748531836.382:20941): pid=106939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531836.382:20942): pid=106939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531836.416:20943): pid=106939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531836.417:20944): pid=106939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106940 suid=74 rport=33934 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531836.418:20945): pid=106939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531836.418:20946): pid=106939 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=101 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531836.418:20946): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe5b13c810 a2=4 a3=3e8 items=0 ppid=12358 pid=106939 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=101 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531836.418:20946): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531836.419:20947): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531836.435:20948): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.436:20949): pid=106944 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531836.437:20950): pid=106944 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531836.479:20951): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531836.479:20952): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.480:20953): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106945 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531836.498:20954): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531836.498:20955): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.498:20956): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106944 suid=1000 rport=33934 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.499:20957): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531836.500:20958): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531836.500:20959): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.501:20960): pid=106939 uid=0 auid=1000 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106939 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531836.520:20961): pid=106961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531836.521:20962): pid=106960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106961 suid=74 rport=33950 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531836.521:20963): pid=106960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106961 suid=74 rport=33950 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531836.599:20964): pid=106960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531836.599:20965): pid=106960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531836.634:20966): pid=106960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531836.635:20967): pid=106960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106961 suid=74 rport=33950 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531836.637:20968): pid=106960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531836.637:20969): pid=106960 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=102 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531836.637:20969): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff1a1df200 a2=4 a3=3e8 items=0 ppid=12358 pid=106960 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=102 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531836.637:20969): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531836.638:20970): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531836.654:20971): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.655:20972): pid=106963 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531836.656:20973): pid=106963 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531836.698:20974): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531836.698:20975): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.699:20976): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106964 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531836.722:20977): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531836.722:20978): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.722:20979): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106963 suid=1000 rport=33950 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.722:20980): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531836.724:20981): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531836.724:20982): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.725:20983): pid=106960 uid=0 auid=1000 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531836.742:20984): pid=106980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531836.743:20985): pid=106979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106980 suid=74 rport=33958 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531836.743:20986): pid=106979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106980 suid=74 rport=33958 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531836.824:20987): pid=106979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531836.824:20988): pid=106979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531836.857:20989): pid=106979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531836.858:20990): pid=106979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106980 suid=74 rport=33958 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531836.860:20991): pid=106979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531836.860:20992): pid=106979 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=103 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531836.860:20992): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffed5a02f30 a2=4 a3=3e8 items=0 ppid=12358 pid=106979 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=103 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531836.860:20992): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531836.861:20993): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531836.876:20994): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.877:20995): pid=106982 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531836.878:20996): pid=106982 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531836.920:20997): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531836.920:20998): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.923:20999): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106983 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531836.941:21000): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_LOGOUT msg=audit(1748531836.941:21001): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.942:21002): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106982 suid=1000 rport=33958 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.942:21003): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106982 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_END msg=audit(1748531836.943:21004): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRED_DISP msg=audit(1748531836.944:21005): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531836.944:21006): pid=106979 uid=0 auid=1000 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106979 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1748531836.959:21007): pid=106998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=106998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1748531836.959:21008): pid=106997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106998 suid=74 rport=33964 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1748531836.960:21009): pid=106997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=106998 suid=74 rport=33964 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1748531837.036:21010): pid=106997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="rocky" exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531837.036:21011): pid=106997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:32:89:de:e2:98:c8:3d:05:3a:f8:27:7c:6b:d5:7f:f0:ec:a8:6d:1f:c3:b6:ef:19:19:2e:5c:58:76:4c:3d:f3 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1748531837.070:21012): pid=106997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1748531837.070:21013): pid=106997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106998 suid=74 rport=33964 laddr=10.0.0.129 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1748531837.072:21014): pid=106997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1748531837.072:21015): pid=106997 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=104 res=1UID="root" OLD-AUID="unset" AUID="rocky"
type=SYSCALL msg=audit(1748531837.072:21015): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc6354a3a0 a2=4 a3=3e8 items=0 ppid=12358 pid=106997 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=104 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="rocky" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531837.072:21015): proctitle=737368643A20726F636B79205B707269765D
type=USER_ROLE_CHANGE msg=audit(1748531837.073:21016): pid=106997 uid=0 auid=1000 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_START msg=audit(1748531837.090:21017): pid=106997 uid=0 auid=1000 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531837.091:21018): pid=107000 uid=0 auid=1000 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=107000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="root"
type=CRED_ACQ msg=audit(1748531837.092:21019): pid=107000 uid=0 auid=1000 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="rocky" exe="/usr/sbin/sshd" hostname=10.0.0.129 addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky"
type=USER_LOGIN msg=audit(1748531837.134:21020): pid=106997 uid=0 auid=1000 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=USER_START msg=audit(1748531837.134:21021): pid=106997 uid=0 auid=1000 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=10.0.0.129 terminal=ssh res=success'UID="root" AUID="rocky" ID="rocky"
type=CRYPTO_KEY_USER msg=audit(1748531837.135:21022): pid=106997 uid=0 auid=1000 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:18:51:78:19:e3:50:b7:0d:ac:6f:af:ef:1b:44:dd:25:79:c1:d1:43:44:78:0f:75:f3:1a:09:13:ea:71:d6:ec direction=? spid=107001 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="rocky" SUID="rocky"
type=USER_ACCT msg=audit(1748531837.195:21023): pid=107027 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531837.195:21024): pid=107027 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd="contrail-status" exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531837.196:21025): pid=107027 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531837.198:21026): pid=107027 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=BPF msg=audit(1748531837.584:21027): prog-id=768 op=LOAD
type=SYSCALL msg=audit(1748531837.584:21027): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1c48 a2=90 a3=0 items=0 ppid=107051 pid=107062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531837.584:21027): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39346265636464616134363035653439393962623537653436
type=BPF msg=audit(1748531837.584:21028): prog-id=769 op=LOAD
type=SYSCALL msg=audit(1748531837.584:21028): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c0001a19d8 a2=90 a3=0 items=0 ppid=107051 pid=107062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531837.584:21028): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39346265636464616134363035653439393962623537653436
type=BPF msg=audit(1748531837.584:21029): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531837.584:21030): prog-id=0 op=UNLOAD
type=BPF msg=audit(1748531837.584:21031): prog-id=770 op=LOAD
type=SYSCALL msg=audit(1748531837.584:21031): arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001a1eb0 a2=90 a3=0 items=0 ppid=107051 pid=107062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1748531837.584:21031): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39346265636464616134363035653439393962623537653436
type=BPF msg=audit(1748531839.153:21032): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1748531839.261:21033): pid=107027 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531839.261:21034): pid=107027 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531839.298:21035): pid=107120 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531839.298:21036): pid=107120 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=63686F776E202D52203A202F746D702F616E7369626C652D6C6F67732F6C6F6773 exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531839.299:21037): pid=107120 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531839.301:21038): pid=107120 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531839.303:21039): pid=107120 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531839.304:21040): pid=107120 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531839.375:21041): pid=107131 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531839.375:21042): pid=107131 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6E657473746174202D6C706E exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531839.375:21043): pid=107131 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531839.377:21044): pid=107131 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531839.459:21045): pid=107131 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531839.460:21046): pid=107131 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531839.542:21047): pid=107149 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531839.542:21048): pid=107149 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6370202F6574632F6368726F6E792E636F6E66202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531839.543:21049): pid=107149 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531839.545:21050): pid=107149 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531839.548:21051): pid=107149 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531839.548:21052): pid=107149 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531839.614:21053): pid=107154 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531839.614:21054): pid=107154 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=6370202F7661722F6C6F672F6D65737361676573202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531839.614:21055): pid=107154 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531839.616:21056): pid=107154 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_END msg=audit(1748531839.620:21057): pid=107154 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_DISP msg=audit(1748531839.620:21058): pid=107154 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_ACCT msg=audit(1748531839.655:21059): pid=107158 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rocky" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_CMD msg=audit(1748531839.655:21060): pid=107158 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/ansible-logs" cmd=62617368202D63206370202D72202F7661722F6C6F672F61756469742F2A202F746D702F616E7369626C652D6C6F67732F6C6F67732F73797374656D2F61756469742F20323E2F6465762F6E756C6C exe="/usr/bin/sudo" terminal=? res=success'UID="rocky" AUID="rocky"
type=CRED_REFR msg=audit(1748531839.656:21061): pid=107158 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"
type=USER_START msg=audit(1748531839.657:21062): pid=107158 uid=1000 auid=1000 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="rocky" AUID="rocky"